CVE-2022-0745CWE-862

Like Button Rating < 2.6.45 - Arbitrary e-mail Sending

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-06-13T12:41Z
EPSS history
Timeline
  • 13 JUN 12:41Z
    Like Button Rating < 2.6.45 - Arbitrary e-mail Sending
    cvelistv5