Skip to main content

Wp Ulike CVE-2022-45842

LOW
Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
2022-11-30 audit@patchstack.com
Information Disclosure WordPress Wp Ulike
3.7
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.7 LOW
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 30, 2022 - 13:15 nvd
LOW 3.7

DescriptionNVD

Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rating scores.

AnalysisAI

Unauth. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-367. Unauth. Race Condition vulnerability in WP ULike Plugin <= 4.6.4 on WordPress allows attackers to increase/decrease rating scores. Affected products include: Technowich Wp Ulike.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Wp Ulike

View all
CVE-2024-1797 HIGH
8.8 May 02

The WP ULike - Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'st
CVE-2024-7879 MEDIUM POC
4.8 Nov 06

The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high pri
CVE-2024-7878 MEDIUM POC
4.8 Sep 25

The WP ULike WordPress plugin before 4.7.4 does not sanitise and escape some of its settings, which could allow high pri
CVE-2024-6094 MEDIUM POC
4.8 Jul 24

The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high pri
CVE-2024-6792 LOW POC
3.5 Sep 06

The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public pa
CVE-2024-1572 MEDIUM
6.4 May 02

The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_ulike' shortcode in

CVE-2024-1759 MEDIUM
6.4 May 02

The WP ULike - Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripti
CVE-2023-45640 MEDIUM
5.4 Oct 25

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat
CVE-2024-9649 MEDIUM
4.3 Oct 16

The WP ULike - The Ultimate Engagement Toolkit for Websites plugin for WordPress is vulnerable to Cross-Site Request For
CVE-2024-12770 MEDIUM POC
4.8 May 15

The WP ULike WordPress plugin before 4.7.6 does not sanitise and escape some of its settings, which could allow high pri

Same weakness CWE-367 – Time-of-check Time-of-use (TOCTOU) Race Condition

View all
CVE-2024-30088 HIGH POC
7.0
CVE-2025-22224 CRITICAL
9.3
CVE-2022-48618 HIGH
7.0
CVE-2023-38146 HIGH POC
8.8
CVE-2025-34027 CRITICAL POC
10.0
CVE-2020-1337 HIGH POC
7.8
CVE-2026-25641 CRITICAL POC
10.0
CVE-2024-28718 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-45842 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy