Wp Like Button Security Vulnerabilities and Issues — Wp Like Button CVE List

CrudlabWp Like Button

2 matches found

CVE•added 2019/07/05 3:33 p.m.•333 views

CVE-2019-13344

CVE-2019-13344 involves the CRUDLab WordPress plugin “WP Like Button” (versions up to 1.6.0). The root cause is in the contains() function of wp_like_button.php, which fails to verify the current user’s authorization, enabling any unauthenticated user to update plugin settings (e.g., via wp-admin...

5.3CVSS5.4AI score0.45095EPSS

Web

CVE•added 2023/10/03 12:33 p.m.•52 views

CVE-2023-40199

CVE-2023-40199 describes a Cross-Site Request Forgery (CSRF) vulnerability in the CRUDLab WP Like Button plugin for WordPress, affecting versions

8.8CVSS7.1AI score0.00208EPSS