Skip to content
OpenAdvisories

Product · topdevs

Simple Like Page Plugin – Fast & Privacy-Friendly Page Embeds

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-3583

    Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. Thi…

    topdevs Simple Like Page Plugin – Fast & Privacy-Friendly Page Embeds Web / CMS
  • Medium 6.4
    CVE-2023-4888

    Simple Like Page Plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Simple Like Page Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sfp-page-plugin' shortcode in versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This …

    topdevs Simple Like Page Plugin – Fast & Privacy-Friendly Page Embeds Web / CMS