CVE-2025-4840: Erumfaham Likes And Dislikes

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

Affected products

• Erumfaham Likes And Dislikes: up to and including 1.0.0

Published 2025-06-10. Last modified 2026-06-17.