Skip to content
Alimir vulnerabilities
Newest
-
alimir wp ulike – like & dislike buttons for engagement and feedback
WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute
CVE-2026-2358
6.4 Medium
-
alimir wp ulike – like & dislike buttons for engagement and feedback
WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter
CVE-2026-0909
5.3 Medium
-
alimir wp ulike
WP ULike < 4.7.6 - Admin+ Stored XSS
CVE-2024-12770
4.8 Medium
-
alimir wp ulike
WordPress WP ULike plugin <= 4.7.9.1 - Content Spoofing Vulnerability
CVE-2025-32259
Public exploit
5.3 Medium
-
alimir wp ulike
WordPress WP ULike plugin <= 4.7.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22738
5.9 Medium
-
alimir wp ulike
WP ULike < 4.7.5 - Admin+ Stored XSS via Widgets
CVE-2024-7879
4.8 Medium
-
wpulike wp ulike, alimir wp ulike – like & dislike buttons for engagement and feedback +1 more
WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion
CVE-2024-9649
4.3 Medium
-
alimir wp ulike
WP ULike < 4.7.4 - Admin+ Stored XSS
CVE-2024-7878
4.8 Medium
-
alimir wp ulike
WP ULike < 4.7.2.1 - Subscriber+ Stored-XSS
CVE-2024-6792
3.5 Low
-
alimir wp ulike, wp ulike project ulike +1 more
WP ULike < 4.7.1 - Admin+ Stored XSS
CVE-2024-6094
4.8 Medium
-
wpulike wp ulike, alimir wp ulike – like & dislike buttons for engagement and feedback +1 more
WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2024-1759
6.4 Medium
-
wpulike wp ulike, alimir wp ulike – like & dislike buttons for engagement and feedback +1 more
WP ULike – Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes
CVE-2024-1797
8.8 High
-
wpulike wp ulike, alimir wp ulike – like & dislike buttons for engagement and feedback +1 more
WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-1572
6.4 Medium
-
alimir wp ulike – most advanced wordpress marketing toolkit, technowich wp ulike +1 more
WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-45640
6.5 Medium