Alimir WP ULike Missing Authorization Vulnerability Allowing Content Spoofing

A missing authorization vulnerability has been identified in the Alimir WP ULike plugin for WordPress, affecting versions through 4.7.9.1. This vulnerability allows unauthorized users to inject content into pages and posts, potentially leading to the insertion of phishing materials.

Impact

Exploitation of this vulnerability could result in content spoofing, allowing attackers to manipulate the content displayed on the website. This could be used to inject misleading information or create phishing pages that appear legitimate to users.