TI-2026-54457 CVE-2026-78285 · GHSA-7859-r75x-mrcr
WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
LikeBtn
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
LikeBtn records in CISA KEVNo LikeBtn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2021-07224 CVE-2021-24945 · GHSA-v7hx-7773-729x
Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure
Priority LOW 36
The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to ge…
TI-2024-29653 CVE-2024-44064 · GHSA-8xcv-2xx2-x48c
WordPress Like Button Rating LikeBtn plugin <= 2.6.53 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LikeBtn Like Button Rating likebtn-like-button.This issue affects Like Button Rating: from n/a through <= 2.6.53.
TI-2022-00656 CVE-2022-0745 · GHSA-84rr-vcc9-5cj4
Like Button Rating < 2.6.45 - Arbitrary e-mail Sending
Priority LOW 30
The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body
TI-2026-83247 CVE-2026-116552 · GHSA-4v84-f6r5-m2gf
Stored cross-site scripting in LikeBtn WordPress plugin
Priority LOW 21
The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_IP (Client-IP header)' parameter in all versions up to, and including, 2.6.64 due to insufficient in…