Skip to content
Sign in
Not rated

CVE-2021-24945 The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the…

Description

The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.

Affected products and versions

Product Affected versions Fixed in
Like Button Rating ♥ LikeBtn 2.6 earliest → < 2.6.38 2.6.38

Other CVEs of Like Button Rating ♥ LikeBtn

The 3 CVEs of Like Button Rating ♥ LikeBtn →
CVE-2022-0745 The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary… Not rated CVE-2021-24150 The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated… Not rated
Track this CVE