Alimir
8 CVEs across 2 Alimir products. Browse Alimir vulnerabilities, severities, and proof-of-concept exploits.
Alimir products with known CVEs
Alimir CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-2358 | Medium | 6.4 | 2026-03-11 | The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[wp_ulike_likers_box]` shortcode `template` attribute in all versions u… |
CVE-2026-0909 | Medium | 5.3 | 2026-02-03 | The WP ULike plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.8.3.1. This is due to the `wp_ulike… |
CVE-2025-32259 | Medium | 5.3 | 2025-04-10 | Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through <= 4.7.9.1. |
CVE-2025-22738 | Medium | 5.9 | 2025-01-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alimir WP ULike wp-ulike allows Stored XSS.This issue aff… |
CVE-2024-9649 | Medium | 4.3 | 2024-10-16 | The WP ULike – The Ultimate Engagement Toolkit for Websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi… |
CVE-2024-1797 | High | 8.8 | 2024-05-02 | The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'status' and 'id' attributes of the 'wp_ul… |
CVE-2024-1759 | Medium | 6.4 | 2024-05-02 | The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a user's display name in all ver… |
CVE-2024-1572 | Medium | 6.4 | 2024-05-02 | The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_ulike' shortcode in all versions up to, and including, 4.6… |