Pro Like Button
Pro Like Button has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for Pro Like Button has a vendor fix available, so running the current release closes it.
All of these findings were reported by Enrico Marcolini. Pro Like Button is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-89296Pro Like Button <= 1.0 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
Pro Like Button
Author
protsport4991
If you’re looking for one of the best and fastest ways to add like and dislike functionality to your WordPress website, then the Pro Like Button plugin is for you! Pro Like Button is a free WordPress plugin that will allow users of your site to interact with posts that you liked and did not like, and you can track them on the site’s control panel and sort posts according to these parameters. Features Possibility to choose in what page “Likes or Dislikes” will be displayed Possibility to display buttons in any place via shortcode [‘prolikebutton_shortcode’] Possibility to download your own icons for buttons Possibility to sort posts using Likes and Dislikes 10 button Templates (10 types of button layouts) Custom Like & Dislike buttons texts Available for logged and non-logged users Support Clean code (there is nothing redundant in the code) Translations Pro Like Button has been translated into the following languages: English (United States)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C