CRUDLab

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

CRUDLab records in CISA KEV

No CRUDLab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jazz Popups 2 records LOW Wp Like Button 2 records MEDIUM

Records

2 records in Wp Like Button · all components

TI-2019-10025 CVE-2019-13344 · GHSA-xv32-4rjr-hg8q

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0…

MEDIUM 53

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.45095 Published 2019-07-05 No fix listed CWE-306

TI-2023-21069 CVE-2023-40199 · GHSA-p692-r287-qx5x

WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

Open these records in search →

Critical	0
High	6
Medium	3
Low	0
No CVSS	0