Input validation vulnerability in WP ULike – All-in-One Engagement Toolkit 4.7.6

The WP ULike plugin for WordPress has a security issue that could potentially put users at risk. This vulnerability, which exists in versions up to 4.7.6, is caused by not properly filtering and escaping input. This means that attackers who have admin access or higher can add harmful website scripts to pages, which will then run when a user visits the affected page. It only affects installations with multiple sites or disabled unfiltered_html.