alimir WP ULike – Like & Dislike Buttons for Engagement and Feedback vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest alimir WP ULike – Like & Dislike Buttons for Engagement and Feedback vulnerabilities

CVE-2026-2358 — WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute (CVSS 6.4)
CVE-2026-0909 — WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter (CVSS 5.3)
CVE-2025-32259 — WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability (CVSS 5.3)
CVE-2025-22738 — WordPress WP ULike plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
CVE-2024-9649 — WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion (CVSS 4.3)
CVE-2024-1797 — WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes (CVSS 8.8)
CVE-2024-1759 — WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-1572 — WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)