Skip to content
OpenAdvisories
Unscored Scanner template CVE-2021-24150 EUVD-2021-11064GHSA-mvp3-9f9g-qv99

Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF

Published Apr 5, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).

Affected products

VendorProductAffectedFixed
— Like Button Rating ♥ LikeBtn 2.6.32 – < 2.6.32 2.6.32

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References