CVE-2022-0745

🗓️ 13 Jun 2022 12:41:30Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 73 Views🌐 WEB

The Like Button Rating WordPress plugin before 2.6.45 allows arbitrary e-mails

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-0745	13 Jun 202213:15	–	attackerkb
CNNVD	WordPress plugin Like Button Rating 安全漏洞	13 Jun 202200:00	–	cnnvd
CNVD	WordPress Like Button Rating plugin Access Control Error Vulnerability	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-0745 Like Button Rating < 2.6.45 - Arbitrary e-mail Sending	13 Jun 202212:41	–	cvelist
EUVD	EUVD-2022-15811	3 Oct 202520:07	–	euvd
NVD	CVE-2022-0745	13 Jun 202213:15	–	nvd
OSV	CVE-2022-0745	13 Jun 202213:15	–	osv
Patchstack	WordPress Like Button Rating LikeBtn plugin <= 2.6.44 - Arbitrary e-mail Sending vulnerability	23 May 202200:00	–	patchstack
Prion	Information disclosure	13 Jun 202213:15	–	prion
RedhatCVE	CVE-2022-0745	9 Jan 202610:44	–	redhatcve

NVD

Vulners

Node

likebtn like_button_ratingRange<2.6.45wordpress

[
  {
    "product": "Like Button Rating ♥ LikeBtn",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.6.45",
        "status": "affected",
        "version": "2.6.45",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/180f8e87-1463-43bb-a901-80031127723a

Parameter	Position	Path	Description	CWE
options[likebtn_notify_to]	request body	/wp-admin/admin-ajax.php?action=likebtn_test_vote_notification	Authenticated user can send arbitrary emails to any recipient with arbitrary subject/body via the likebtn_test_vote_notification Ajax endpoint.	CWE-862
options[likebtn_notify_subject]	request body	/wp-admin/admin-ajax.php?action=likebtn_test_vote_notification	Authenticated user can send arbitrary emails to any recipient with arbitrary subject/body via the likebtn_test_vote_notification Ajax endpoint.	CWE-862
options[likebtn_notify_text]	request body	/wp-admin/admin-ajax.php?action=likebtn_test_vote_notification	Authenticated user can send arbitrary emails to any recipient with arbitrary subject/body via the likebtn_test_vote_notification Ajax endpoint.	CWE-862

17 Jun 2026 04:21Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24

CVSS 3.16.5

EPSS0.00752

CWE-862