Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Like in Vk.com 0.5.2

  • Severity: medium-risk
  • Status: Open
  • Publication: December 12, 2024

The plugin called “Like in Vk.com” for WordPress has a security issue called Cross-Site Request Forgery. This affects all versions up to 0.5.2. The problem is that the plugin does not properly check for a unique code, making it possible for attackers to change settings and add harmful code to the website. This can happen if they can trick the person in charge of the site into clicking on a link.

Detected in:

Like in Vk.com open vulnerable versions: >= * <= 0.5.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.