Enhancement: cves/2021/CVE-2021-24150.yaml by md
parent
d28c26d4bd
commit
0a5649f727
|
@ -1,11 +1,11 @@
|
|||
id: CVE-2021-24150
|
||||
|
||||
info:
|
||||
name: Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF
|
||||
name: WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery
|
||||
author: theamanrawat
|
||||
severity: high
|
||||
description: |
|
||||
The LikeBtn WordPress plugin was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).
|
||||
WordPress Like Button Rating plugin before 2.6.32 is susceptible to server-side request forgery. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations.
|
||||
reference:
|
||||
- https://wpscan.com/vulnerability/6bc6023f-a5e7-4665-896c-95afa5b638fb
|
||||
- https://wordpress.org/plugins/likebtn-like-button/
|
||||
|
@ -36,3 +36,5 @@ requests:
|
|||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
||||
# Enhanced by md on 2023/04/04
|
||||
|
|
Loading…
Reference in New Issue