Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total2
Critical0
High1
Medium1
Reset
Showing 1-2 of 2 records
Threat Entry Updated 2024-11-21

CVE-2022-0745 - Like Button Rating Plugin

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body

PLUGIN Like Button Rating

CVE-2022-0745

MEDIUM CVSS 6.5 2022-06-13
Threat Entry Updated 2024-11-21

CVE-2021-24945 - Like Button Rating Plugin

The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.

PLUGIN Like Button Rating

CVE-2021-24945

HIGH CVSS 8.0 2021-12-13
Scroll to top