Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.6%
probabilidade de exploração
0.6%top 57% das CVEs
exploração observada
nãonenhuma fonte reporta
The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.
Produtos afetados
Unknown · Like Button Rating ♥ LikeBtn