CVE-2021-24150

HIGH NUCLEI

Likebtn-like-button < 2.6.32 - SSRF

Title source: rule

Description

The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF).

Nuclei Templates (1)

WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery

HIGHVERIFIEDby theamanrawat

References (1)

[Third Party Advisory] https://wpscan.com/vulnerability/6bc6023f-a5e7-4665-896c-95afa5b638fb

Scores

CVSS v3 7.5

EPSS 0.5594

EPSS Percentile 98.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-918

Status published

Products (1)

likebtn-like-button_project/likebtn-like-button < 2.6.32

Published Apr 05, 2021

Tracked Since Feb 18, 2026