like_button_rating_likebtn vulnerabilities

CVEs whose affected-version data names the like_button_rating_likebtn package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116552Medium· 4.7

1w ago

Like Button Rating ♥ LikeBtn <= 2.6.64 - Unauthenticated Stored Cross-Site Scripting via 'Client-IP' Header

The Like Button Rating ♥ LikeBtn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_CLIENT_IP (Client-IP header)' parameter in all versions up to, and including, 2.6.64 due to insufficient input sanitization …

▾ Sunlitlikebtn · Like Button Rating ♥ LikeBtnEPSS 0.31%via CVEORG