Skip to content
OpenAdvisories

Vendor

CRUDLab

8 known vulnerabilities.

Products

WP Like Button 2 Jazz Popups 2 CRUDLab Google Plus Button 1 CRUDLab Scroll to Top 1 Image Gallery Box by CRUDLab 1 CRUDLab Like Box 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-47820

    WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CRUDLab WP Like Button allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Like Button: from n/a through 1.7.0.

    CRUDLab WP Like Button
  • Medium 5.4
    CVE-2023-32966

    WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS

    Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab Jazz Popups leads to Stored XSS.This issue affects Jazz Popups: from n/a through 1.8.7.

    CRUDLab Jazz Popups
  • Medium 5.4
    CVE-2023-40199

    WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions.

    CRUDLab WP Like Button