CVE-2021-24150CWE-918

CVE-2021-24150: falha em Like Button Rating ♥ LikeBtn

Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Like Button Rating ♥ LikeBtn

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 4.3%
The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).
Produtos afetados
Unknown · Like Button Rating ♥ LikeBtn
CVEs relacionadas — Like Button Rating ♥ LikeBtn

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0745—Like Button Rating < 2.6.45 - Arbitrary e-mail SendingEPSS 0.8%CVE-2021-24945—Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses DisclosureEPSS 0.6%