VYPR

Like Button Rating ♥ LikeBtn

by WordPress

CVEs (1)

  • CVE-2021-24945HigDec 13, 2021
    risk 0.52cvss 8.0epss 0.01

    The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked…