CVE-2024-6792 The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public…

Description

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.

Affected products and versions

Product	Affected versions	Fixed in
WP ULike 4.7	4.7.1 → < 4.7.2.1	4.7.2.1
wp_ulike 4.7	earliest → < 4.7.2.1	4.7.2.1

Other CVEs of WP ULike

The 5 CVEs of WP ULike →

CVE-2024-12770 The WP ULike WordPress plugin before 4.7.6 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium CVE-2024-7879 The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium CVE-2024-7878 The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium CVE-2024-6094 The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium