Description
WordPress Plugin Like Button Rating-LikeBtn is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently set any option. WordPress Plugin Like Button Rating-LikeBtn version 2.5.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.5.4 or latest
References
https://advisories.dxw.com/advisories/likebtn-set-any-option/
https://plugins.svn.wordpress.org/likebtn-like-button/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin WP Email Template PHP Object Injection (2.4.0)
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
WordPress Plugin tcS3 Cross-Site Scripting (2.1.1)
WordPress Plugin Custom Sidebars-Dynamic Widget Area Manager Multiple Vulnerabilities (3.0.8)
WordPress Plugin Essential Real Estate Cross-Site Scripting (1.7.0)