Medium · 6.5 CVE-2023-45640 EUVD-2023-49932GHSA-8cc6-rm8x-j43q

WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)

Published Oct 24, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: TechnoWich Product: WP ULike – Most Advanced WordPress Marketing Toolkit Category: Web / CMS

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TechnoWich WP ULike – Most Advanced WordPress Marketing Toolkit plugin <= 4.6.8 versions.

Affected products

Vendor	Product	Affected	Fixed
TechnoWich	WP ULike – Most Advanced WordPress Marketing Toolkit	≤ 4.6.8	—

References

https://patchstack.com/database/vulnerability/wp-ulike/wordpress-wp-ulike-plugin-4-6-8-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry