Wp Like Button

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-40199 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in CRUDLab WP Like Button plugin <= 1.7.0 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wp Like Button

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2019-13344 MEDIUM POC THREAT This Month

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass WordPress PHP Wp Like Button

NVD Exploit-DB

CVSS 3.0

5.3

EPSS

45.1%

CVE-2023-40199

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wp Like Button

NVD

CVE-2019-13344

EPSS 45% CVSS 5.3

MEDIUM POC THREAT This Month

Authentication Bypass WordPress PHP +1

NVD Exploit-DB