https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-41432.htmlhttps://patchthecve.com/cve/CVE-2024-41432.htmlWed, 17 Jun 2026 07:47:41 +0000MEDIUM 5.3: An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP address with any arbitrary IP address, specifically by adding a forged 'X-Forwarded' or 'Client-IP' header to requests. Exploiting IP spoofing, attackers can bypahttps://patchthecve.com/cve/CVE-2024-5766.htmlhttps://patchthecve.com/cve/CVE-2024-5766.htmlWed, 17 Jun 2026 08:16:37 +0000LOW 2.4: A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin of the component Merchandise Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-267449 was asshttps://patchthecve.com/cve/CVE-2024-34949.htmlhttps://patchthecve.com/cve/CVE-2024-34949.htmlWed, 17 Jun 2026 07:34:14 +0000HIGH 8.2: SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.https://patchthecve.com/cve/CVE-2024-24028.htmlhttps://patchthecve.com/cve/CVE-2024-24028.htmlWed, 17 Jun 2026 07:14:03 +0000MEDIUM 5.9: Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar parameter in function UserLogic::updateWechatInfo.https://patchthecve.com/cve/CVE-2024-24027.htmlhttps://patchthecve.com/cve/CVE-2024-24027.htmlWed, 17 Jun 2026 07:14:03 +0000HIGH 7.2: SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.https://patchthecve.com/cve/CVE-2024-0352.htmlhttps://patchthecve.com/cve/CVE-2024-0352.htmlWed, 17 Jun 2026 06:53:19 +0000HIGH 7.3: A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unres