Read the docs

LikeBtn

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

LikeBtn records in CISA KEV

No LikeBtn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Like Button Rating 3 records LOW

Records

3 records in Like Button Rating · all components

TI-2021-07224 CVE-2021-24945 · GHSA-v7hx-7773-729x

Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure

Priority LOW 36

The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to ge…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00575 Published 2021-12-13 Fixed in 2.6.38 CWE-200
TI-2024-29653 CVE-2024-44064 · GHSA-8xcv-2xx2-x48c

WordPress Like Button Rating LikeBtn plugin <= 2.6.53 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LikeBtn Like Button Rating likebtn-like-button.This issue affects Like Button Rating: from n/a through <= 2.6.53.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2024-09-17 No fix listed CWE-79
TI-2022-00656 CVE-2022-0745 · GHSA-84rr-vcc9-5cj4

Like Button Rating < 2.6.45 - Arbitrary e-mail Sending

Priority LOW 30

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00814 Published 2022-06-13 Fixed in 2.6.45 CWE-862
Open these records in search →