PatchTheCVElikeshop vulnerabilities
Recent CVEs affecting likeshop products. 6 tracked.
likeshop has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-08-07. Highest priority: CVE-2024-0352 (score 55/100).
- CVE-2024-5766 LOW 2.4 UPGRADE A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic
- CVE-2024-41432 MEDIUM 5.3 UPGRADE An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811
- CVE-2024-34949 HIGH 8.2 UPGRADE SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the fun
- CVE-2024-24028 MEDIUM 5.9 UPGRADE Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive i
- CVE-2024-24027 HIGH 7.2 UPGRADE SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the fun
- CVE-2024-0352 HIGH 7.3 UPGRADE A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311
FAQ
How do I fix likeshop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is likeshop being exploited right now?
None of the tracked likeshop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which likeshop CVE should I patch first?
CVE-2024-0352 currently ranks highest (55/100): A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311.