Security Advisory

CVE-2015-9466

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-10-10 16:03:18
Last updated 2024-08-06 08:51:05
Assigner mitre
State PUBLISHED

Description

The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.