CVE-2026-78285

WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability

Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.

We have discovered 396 live websites that are affected by CVE-2026-78285.

Run a Free Instant Scan



Affected Software

Product  Likebtn Like Button
Category Wordpress Plugins
Vulnerable Domains396 live websites (94% of Likebtn Like Button install base)
Vulnerable Versions
  • from 0 through 2.6.61
Vulnerable Versions Count11 versions ( 69% of all versions)


Common Weakness Enumeration

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')



Details

  • Published - Aug 27, 2026
  • Updated - Aug 27, 2026

Credits

  • daroo | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-78285
United States159 websites


Germany36 websites
GB20 websites
France17 websites
Japan16 websites
Italy15 websites
Russia14 websites
Spain12 websites
Netherlands8 websites
Brazil7 websites

Website Distribution by TLD

Number of websites using CVE-2026-78285
.com180 websites
.org25 websites
.de22 websites
.net20 websites
.it12 websites
.ru10 websites
.co.uk9 websites
.nl8 websites
.com.br8 websites
.fr7 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-78285

Top websites that are affected by CVE-2026-78285. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**********.net United States**,***
***.**********.**.jp Japan**,***
****************.com France***,***
********************.fr France***,***
******.cz Czech Republic***,***
***************.***.au Australia***,***
**********.com Switzerland***,***
*****.org United States***,***
******.org GB***,***
**************.com United States***,***
See full domain list

FAQ

CVE-2026-78285 is Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Likebtn Like Button
A total of 396 websites have been identified as vulnerable to CVE-2026-78285, based on global website indexing conducted by WebTechSurvey.
The Likebtn Like Button is affected by the CVE-2026-78285 vulnerability.
Likebtn Like Button versions up to and including 2.6.61 are vulnerable to CVE-2026-78285.