CVE-2021-24150

HIGH NUCLEI

LikeBtn WordPress Like Button < 2.6.32 - Unauthenticated Server-Side Request Forgery

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-24150 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).

Nuclei Templates (1)

WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery
HIGHVERIFIEDby theamanrawat

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0437
EPSS Percentile 90.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-918
Status published
Products (1)
likebtn-like-button_project/likebtn-like-button < 2.6.32
Published Apr 05, 2021
Tracked Since Feb 18, 2026