WP ULike – Like & Dislike Buttons for Engagement and Feedback

Explore WP ULike – Like & Dislike Buttons for Engagement and Feedback vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891028.08.2014Today14.05.20187.5WP ULike < 3.2 - Missing Authorization CVSS 7.5 · 14.05.20187.2WP ULike < 3.2 - Cross-Site Scripting CVSS 7.2 · 14.05.201824.11.20224.3WP ULike <= 4.6.4 - Race Condition CVSS 4.3 · 24.11.202212.10.20236.4WP ULike <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode CVSS 6.4 · 12.10.202326.04.20246.4WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 26.04.20248.8WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes CVSS 8.8 · 26.04.20246.4WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 6.4 · 26.04.202403.07.20244.4WP ULike <= 4.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 03.07.202416.08.20246.4WP ULike 4.7.1 - 4.7.2 - Authenticated (Subscriber+) Stored-Cross-Site Scripting CVSS 6.4 · 16.08.202404.09.20244.4WP ULike <= 4.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 04.09.202415.10.20244.4WP ULike <= 4.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 15.10.20244.3WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion CVSS 4.3 · 15.10.202414.01.20254.4WP ULike <= 4.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 14.01.202523.01.20254.4WP ULike <= 4.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 23.01.202504.04.20255.3WP ULike <= 4.7.9.1 - Missing Authorization to Unauthenticated Content Spoofing CVSS 5.3 · 04.04.202502.02.20265.3WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter CVSS 5.3 · 02.02.202610.03.20266.4WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute CVSS 6.4 · 10.03.2026

Strategic Overview

Avg CVSSMedium
5.7/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all WP ULike – Like & Dislike Buttons for Engagement and Feedback vulnerabilities before they are exploited.

Vulnerability Records

17 records
2026-03-10 17:08CVE-2026-2358
6.4
Medium
Quốc Huy (jtwings)Yes
2026-02-02 14:51CVE-2026-0909
5.3
Medium
Pouria Shahba (p0or1ya)Yes
2025-04-04 00:00CVE-2025-32259
5.3
Medium
Robert DeVoreYes
2025-01-23 00:00CVE-2024-12770
4.4
Medium
Dmitrii IgnatyevYes
2025-01-14 00:00CVE-2025-22738
4.4
Medium
Robert DeVoreYes
2024-10-15 00:00CVE-2024-7879
4.4
Medium
Dmitrii IgnatyevYes
2024-10-15 00:00CVE-2024-9649
4.3
Medium
Bilal Chawich (Duke)Yes
2024-09-04 00:00CVE-2024-7878
4.4
Medium
Bob MatyasYes
2024-08-16 00:00CVE-2024-6792
6.4
Medium
stealthcopterYes
2024-07-03 00:00CVE-2024-6094
4.4
Medium
Dmitrii IgnatyevYes
Showing 1–10 of 17 reports
WP ULike – Like &amp; Dislike Buttons for Engagement and Feedback banner
Latestv5.1.2

WP ULike – Like &amp; Dislike Buttons for Engagement and Feedback

Alimir

Author

Alimir

4.8(278)
96/100
Last Updated
2026-06-22 (1mo ago)
Active Installs
60,000+
Downloads
2,538,380
Requires WP
6.0+
Requires PHP
7.2.5+
Tested up to
WP 7.0.2
Created
2014-08-28 (12y ago)

Like buttons for WordPress Most visitors read without commenting. WP ULike adds one-click voting so you get a clear signal on what resonates, with no signup walls and no heavy setup. Install, activate, and voting goes live on posts. Open WP ULike → Statistics inside WordPress to see totals, top content, growth tips, and when your audience is most active. Optional IP anonymization, WordPress personal data export/erase, and flexible logging options help you align the plugin with your privacy policy. WP ULike supports posts out of the box and integrates with WooCommerce, BuddyPress, and bbPress. The frontend uses vanilla JavaScript (no jQuery) and works with major caching plugins. Statistics you’ll actually use A clear view of what’s working: totals, trends, and patterns without the clutter. Free includes Overview, growth tips, engagement reports, when-to-publish insights, and vote logs. Dark mode and focus mode are built in. Pro (optional) adds who liked each post, deeper audience and content reports, and full WooCommerce store insights. Free includes a real dashboard. Pro adds deeper reports when you need them. Built for Bloggers & publishers: See which content earns appreciation, not just traffic. Online stores: Learn which products visitors value. Communities: Add voting to forums and activity feeds. Agencies & developers: Reliable on client sites, quick to deploy, straightforward to maintain. Free version: complete, no limits The free plugin is a full voting solution, not a trial. No caps on votes, posts, or usage. Included with free: Like buttons on posts via auto-display, [wp_ulike] shortcodes, or the ULike Button block Top List block for ranked posts, comments, users, BuddyPress activities, and bbPress topics Statistics dashboard with Overview, growth tips, engagement reports, publish-timing insights, vote logs, dark mode, and focus mode Button customizer with live preview, multiple templates, and RTL support Auto-display settings for posts, comments, BuddyPress, bbPress, and WooCommerce Settings backup (JSON export/import) and Site Health table check Privacy tools for user-linked vote data and optional IP anonymization Regular updates, WordPress coding standards, and security best practices (nonces, hardened AJAX, and more). WP ULike Pro Pro is optional. It extends the free plugin when you need more depth or design. Both plugins stay installed and active. See who liked each post and how engaged readers really are (top fans, engagement vs page views) Know what to publish next with content intelligence, heatmaps, and top-country reports Compare likes to sales with full WooCommerce store reports Premium templates, Display Automation, and Schema star ratings for search and setup without code Need profiles, share buttons, bulk vote tools, Elementor widgets, or REST API? Pro includes those too. Compare Free vs Pro for the full list. Browse templates | Documentation

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C