I Recommend This – Love/Like Button for WordPress Posts
I Recommend This – Love/Like Button for WordPress Posts has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2023; all 5 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).
Every one of the 5 issues recorded for I Recommend This – Love/Like Button for WordPress Posts has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Oskar Adin. I Recommend This – Love/Like Button for WordPress Posts is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2014-10376I Recommend This < 3.7.3 - SQL Injection
Read the full analysisVulnerability Records
I Recommend This – Love/Like Button for WordPress Posts
Author
Harish Chouhan
“I Recommend This” allows your visitors to effortlessly like or recommend your posts with a single click, making it easier for them to show their appreciation without leaving a comment. Enhance your site’s engagement by providing a simple, user-friendly way for readers to interact with your content. Features: Display a counter for likes/recommendations. Widget and shortcode to display the most liked posts. Choose between a “Thumbs Up” or “Heart” icon. Prevents multiple votes from the same user via cookies and IP address tracking. View and sort posts by likes in the post edit page. Better GDPR compliance with anonymized IPs Built-in query block compatibility Extensive action and filter hooks for developers Advanced Options: Hide the counter if the count is zero. Customize messages for zero, one, or multiple likes. Disable plugin CSS for custom styling. Option to disable IP address saving to comply with GDPR. Enhanced cookie management IP address anonymization for stronger GDPR compliance Shortcodes: [irecommendthis] – Add the voting link to any page. [irecommendthis_top_posts post_type='post' container='div' number='10' year='2023' monthnum='7'] – Display most recommended posts. This plugin is based exactly on Benoit “LeBen” Burgener’s “I Like This” Plugin and has been modified after getting requests for the changes I had made on my website. If you love the plugin, please consider rating it and clicking on “it works” button. Example Sites Using the Plugin: Flat UI Design Gallery For Developers: This plugin is being developed on GitHub.. If you want to collaborate, please look at I Recommend This plugin on GitHub. Translations You can help translate this plugin into your language using your WordPress.org account.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C