Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-25115 EUVD-2025-5657GHSA-j5pm-8x2c-24p8

WordPress Like dislike plus counter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zeshan Abdullah Like dislike plus counter like-dislike-plus-counter allows Stored XSS.This issue affects Like dislike plus counter: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
Zeshan Abdullah Like dislike plus counter ≤ 1.0 —

References