Skip to content
OpenAdvisories

Vendor

LikeBtn

3 known vulnerabilities.

Products

Like Button Rating 2 Like Button Rating ♥ LikeBtn 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-116552

    Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header

    The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_IP (Client-IP header)' parameter in all versions up to, and including, 2.6.64 due to insufficient input sanitization and output escaping. T…

    LikeBtn Like Button Rating ♥ LikeBtn Web / CMS