CVE-2026-89296 — Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter

CVE-2026-89296

Pro Like Button < 2.0 - Unauthenticated SQLi via 'postid' Parameter PUBLISHED

Description (CNA)

The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Pro Like Button	affected 0 before 2.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/351a9bf8-03d4-416b-8f30-a2a87e7c4cb2/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.