RSS   Vulnerabilities for 'Like button rating'   RSS

2022-06-13
 
CVE-2022-0745

CWE-862
 

 
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body

 
2021-12-13
 
CVE-2021-24945

CWE-200
 

 
The Like Button Rating ??�??�? LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.

 


Copyright 2024, cxsecurity.com

 

Back to Top