WP ULike – Like & Dislike Buttons for Engagement and Feedback

Уязвимости

• CVE-2024-1797

  WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes

  Высокий 8.8

• CVE-2026-2358

  WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

  Средний 6.4

• CVE-2024-1759

  WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-1572

  WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2023-45640

  WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-0909

  WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter

  Средний 5.3

• CVE-2025-32259

  WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability

  Средний 5.3

• CVE-2025-22738

  WordPress WP ULike plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-9649

  WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion

  Средний 4.3

• CVE-2022-45842

  WordPress WP ULike Plugin <= 4.6.4 is vulnerable to Race Condition vulnerability

  Низкий 3.7