WordPress plugin
Like Button Rating ♥ LikeBtn security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium6
- Low0
All Like Button Rating ♥ LikeBtn vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.7 | Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header ≤2.6.64Update to 2.6.65 | CVE-2026-116552 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤2.6.61Update to 2.6.62 | CVE-2026-78285 | |
| Medium6.1 | Cross-Site Request Forgery ≤2.6.53Update to 2.6.54 | CVE-2024-44064 | |
| Medium5.0 | Arbitrary e-mail Sending ≤2.6.44Update to 2.6.45 | CVE-2022-0745 | |
| Medium6.5 | Unauthorised Vote Export to Email & IP Addresses Disclosure ≤2.6.37Update to 2.6.38 | CVE-2021-24945 | |
| High7.5 | Server-Side Request Forgery <2.6.32Update to 2.6.32 | CVE-2021-24150 | |
| Medium6.5 | Arbitrary Settings Change ≤2.5.3Update to 2.5.4 | — |
- Medium4.7Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header
≤2.6.64Update to 2.6.65
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤2.6.61Update to 2.6.62
- Medium6.1Cross-Site Request Forgery
≤2.6.53Update to 2.6.54
- Medium5.0Arbitrary e-mail Sending
≤2.6.44Update to 2.6.45
- Medium6.5Unauthorised Vote Export to Email & IP Addresses Disclosure
≤2.6.37Update to 2.6.38
- High7.5Server-Side Request Forgery
<2.6.32Update to 2.6.32
- Medium6.5Arbitrary Settings Change
≤2.5.3Update to 2.5.4
Like Button Rating ♥ LikeBtn: common questions
Does Like Button Rating ♥ LikeBtn have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Like Button Rating ♥ LikeBtn: 1 high, 6 medium. None are known to affect version null.
How do I check which version of Like Button Rating ♥ LikeBtn I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Like Button Rating ♥ LikeBtn vulnerability?
CVE-2026-116552, published Oct 30, 2026: Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header. Severity: Medium (CVSS 4.7).
Is any Like Button Rating ♥ LikeBtn vulnerability listed in CISA KEV?
No. None of the known Like Button Rating ♥ LikeBtn vulnerabilities is currently listed in the CISA KEV catalog.