VYPR

Kodex Posts Likes

by Pierros

CVEs (2)

  • CVE-2024-8713MedSep 25, 2024
    risk 0.40cvss 6.1epss 0.00

    The Kodex Posts likes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.0. This makes it possible for unauthenticated attackers to inject…

  • CVE-2022-46814MedMay 25, 2023
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Pierre Lebedel Kodex Posts likes plugin <= 2.4.3 versions.