Non notée
CVE-2021-24945 The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the…
Description
The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Like Button Rating ♥ LikeBtn 2.6 | premières → < 2.6.38 | 2.6.38 |