WP Like Button <= 1.7.0 - Missing Authorization via crublabFBLBAjax

Description

The WP Like Button plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the crublabFBLBAjax function in versions up to, and including, 1.7.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to enable and disable the like button if they are able to retrieve a nonce via a nonce leak.