CVE-2015-9466 | BDVDB-2026-124122 Detail

Description#

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://wpvulndb.com/vulnerabilities/8318
https://wordpress.org/plugins/wti-like-post/#developers
http://cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html

Exploit#

No public exploit known

History#

Version 12019-10-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.