Approved changes feed: RSS · Atom

cpe:2.3:a:themeist:i_recommend_this:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorThemeist (0eabb6c9-df8f-5f34-a3c9-5dfe064201d5)
ProductI Recommend This (3b0742da-bc23-55a9-bc18-d0c60521afe0)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28696 vulnerable 2026-06-08 06:01:14.717846 WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0.
Published: 2023-11-12T21:40:12.162Z
Updated: 2026-04-28T16:08:16.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23673 vulnerable 2026-06-08 05:56:04.174156 WordPress I Recommend This Plugin <= 3.8.3 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.
Published: 2023-05-16T08:28:51.231Z
Updated: 2026-04-28T16:08:00.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-125099 vulnerable 2026-06-08 05:05:15.836558 I Recommend This Plugin dot-irecommendthis.php sql injection
MEDIUM (6.3)
A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to version 3.7.3 is able to address this issue. The identifier of the patch is 058b3ef5c7577bf557557904a53ecc8599b13649. It is recommended to upgrade the affected component. The identifier VDB-226309 was assigned to this vulnerability.
Published: 2023-04-20T05:31:03.692Z
Updated: 2024-08-06T14:10:56.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-10376 vulnerable 2026-06-08 05:05:15.645620 Details available
The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.
Published: 2019-08-16T20:09:48.000Z
Updated: 2024-08-06T14:02:38.357Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.