WP ULike – Like Buttons, Voting & Engagement Analytics
WP ULike – Like Buttons, Voting & Engagement Analytics has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2018 and 2026; all 17 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 11 of the records (65%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key.
Every one of the 17 issues recorded for WP ULike – Like Buttons, Voting & Engagement Analytics has a vendor fix available, so running the current release closes all known holes.
12 independent researchers contributed these findings, most of them (3) reported by Dmitrii Ignatyev. WP ULike – Like Buttons, Voting & Engagement Analytics is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-1797WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
Read the full analysisVulnerability Records

WP ULike – Like Buttons, Voting & Engagement Analytics
Author
Alimir
Like buttons and post reactions for WordPress Most visitors read and leave without commenting, so you never learn what they liked. WP ULike adds one-click voting that takes no effort to use, giving you a clear signal on what resonates. No signup walls, no vote limits, no heavy setup. Install, activate, and voting goes live on posts. Open WP ULike → Statistics inside WordPress to see totals, top content, growth tips, and when your audience is most active. Optional IP anonymization, WordPress personal data export/erase, and flexible logging options help you align the plugin with your privacy policy. WP ULike supports posts out of the box and integrates with WooCommerce, BuddyPress, and bbPress. The frontend uses vanilla JavaScript (no jQuery) and works with major caching plugins. Engagement analytics, built in Pageviews tell you who showed up. Reactions tell you who cared. WP ULike ships a real dashboard inside WordPress, so you don’t need a separate analytics tool to read it. Free includes Overview, growth tips, engagement reports, when-to-publish insights, and vote logs. Dark mode and focus mode are built in. Pro (optional) adds who liked each post, deeper audience and content reports, and full WooCommerce store insights. Built for Bloggers & publishers: See which content earns appreciation, not just traffic. Online stores: Learn which products visitors value. Communities: Add voting to forums and activity feeds. Agencies & developers: Reliable on client sites, quick to deploy, straightforward to maintain. Free version: complete, no limits The free plugin is a full voting solution, not a trial. No caps on votes, posts, or usage. Included with free: Like buttons on posts via auto-display, [wp_ulike] shortcodes, or the ULike Button block Top List block and [wp_ulike_top] shortcode to showcase your most popular posts, comments, users, BuddyPress activities, and bbPress topics Statistics dashboard with Overview, growth tips, engagement reports, publish-timing insights, vote logs, dark mode, and focus mode Button customizer with real-time preview, four button styles, colors, icons, and RTL support Auto-display settings for posts, comments, BuddyPress, bbPress, and WooCommerce Settings backup (JSON export/import) and Site Health table check Privacy tools for user-linked vote data and optional IP anonymization Regular updates, WordPress coding standards, and security best practices (nonces, hardened AJAX, and more). WP ULike Pro Pro is optional. It extends the free plugin when you need more depth or design. Both plugins stay installed and active. Swap likes for emoji reactions or 5-star ratings and pick the reaction style that fits each page See who liked each post and how engaged readers really are (top fans, engagement vs page views) Know what to publish next with content intelligence, heatmaps, and top-country reports Compare likes to sales with full WooCommerce store reports 20 more button styles and Display Automation to match your brand and place buttons without code Rating and FAQ schema published as schema.org markup so search engines can read your ratings Need profiles, share buttons, bulk vote tools, Elementor widgets, or REST API? Pro includes those too. Compare Free vs Pro for the full list. Browse templates | Documentation
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C