CVE-2021-24150CWE-918

CVE-2021-24150: vulnerability in Like Button Rating ♥ LikeBtn

Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF

Published · Updated

Follow this CVE+ Monitor Like Button Rating ♥ LikeBtn

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 4.3%
The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).
Affected products
Unknown · Like Button Rating ♥ LikeBtn
Related CVEs — Like Button Rating ♥ LikeBtn

In the same product, most dangerous first.

CVE-2022-0745—Like Button Rating < 2.6.45 - Arbitrary e-mail SendingEPSS 0.8%CVE-2021-24945—Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses DisclosureEPSS 0.6%