Description
WordPress Plugin Like Button Rating-LikeBtn is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently set any option. WordPress Plugin Like Button Rating-LikeBtn version 2.5.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.4 or latest
References
https://advisories.dxw.com/advisories/likebtn-set-any-option/
https://plugins.svn.wordpress.org/likebtn-like-button/trunk/readme.txt
Related Vulnerabilities
Oracle Database Server CVE-2015-4857 Vulnerability (CVE-2015-4857)
MySQL CVE-2015-4910 Vulnerability (CVE-2015-4910)
Oracle HTTP Server CVE-2016-0671 Vulnerability (CVE-2016-0671)
MySQL CVE-2024-21163 Vulnerability (CVE-2024-21163)
TYPO3 Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-31046)