Skip to content
PluginCanary

WP ULike

WP ULike - Like Buttons, Voting & Engagement Analytics
by Alimir · 60,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 18 days ago, tested with WordPress 7.1, no open vulnerabilities.

90/ 100 Canary Score

Based on 4 of 5 areas

Sub-scores for WP ULike
Ownership100
Maintenance100
Security75
SupportNo data
Reputation85

How the score works

Quick answers

Is WP ULike still maintained?
Yes. Last release 17 Oct 2026, 29 releases in the last 24 months. 17 Oct 2026 · wordpress.org
Who owns WP ULike, and has it changed hands?
No change recorded. Main committer alimir since Aug 2014. 4 Nov 2026 · SVN log
Was WP ULike removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP ULike safe?
17 known vulnerabilities, all fixed (latest in 5.0.2). Not on the exploited list. 10 Mar 2026 · Wordfence Intelligence
Is the latest WP ULike update safe to install?
No ownership change before 5.2.5. No one-star spike after it. 17 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 17 past vulnerabilities, all patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
alimir28 Aug 2014 to 17 Oct 2026, 264 commits

1 committer recorded. No ownership changes recorded since 2014.

Maintenance

Last release
18 days ago
Releases, 24 months
29
Tested up to
7.1 current
Requires PHP
7.3.0 supported 8.2+
Releases per quarter
Releases per quarter for WP ULike
Q1 20241
Q2 20241
Q3 20244
Q4 20242
Q1 20254
Q2 20250
Q3 20252
Q4 20255
Q1 20263
Q2 20268
Q3 20264
Q4 20262

Last release 17 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 4.8.

Last 90 days vs lifetime average rating for WP ULike
Last 90 days5.0
Lifetime4.8
Average rating per quarter
Average rating per quarter for WP ULike
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20243.5
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star253
4 star14
3 star9
2 star3
1 star4
Latest low reviews

Security record

5 vulnerabilities in 24 months (17 on record), all patched (latest fixed in 5.0.2).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
10 Mar 2026WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute6.4<= 5.0.15.0.2Before disclosure
2 Feb 2026WP ULike <= 4.8.3.1 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter5.3<= 4.8.3.15.0.0Before disclosure
4 Apr 2025WP ULike <= 4.7.9.1 - Missing Authorization to Unauthenticated Content Spoofing5.3<= 4.7.9.14.7.10129
23 Jan 2025WP ULike <= 4.7.5 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.7.54.7.6Before disclosure
14 Jan 2025WP ULike <= 4.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.7.64.7.7Before disclosure
15 Oct 2024WP ULike <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion4.3<= 4.7.44.7.5Before disclosure
15 Oct 2024WP ULike <= 4.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.7.44.7.5Before disclosure
4 Sep 2024WP ULike <= 4.7.3 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 4.7.34.7.4Before disclosure
16 Aug 2024WP ULike 4.7.1 - 4.7.2 - Authenticated (Subscriber+) Stored-Cross-Site Scripting6.44.7.1 to 4.7.24.7.2.1Before disclosure
3 Jul 2024WP ULike <= 4.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.7.04.7.1Before disclosure
26 Apr 2024WP ULike - Most Advanced WordPress Marketing Toolkit <= 4.6.9 - Authenticated (Contributor+) SQL Injection via Shortcodes8.8<= 4.6.94.7.0Before disclosure
26 Apr 2024WP ULike <= 4.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 4.6.94.7.0Before disclosure
26 Apr 2024WP ULike <= 4.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 4.6.94.7.0Before disclosure
12 Oct 2023WP ULike <= 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 4.6.84.6.96
24 Nov 2022WP ULike <= 4.6.4 - Race Condition4.3<= 4.6.44.6.56
14 May 2018WP ULike < 3.2 - Cross-Site Scripting7.2< 3.23.2Before disclosure
14 May 2018WP ULike < 3.2 - Missing Authorization7.5< 3.23.2Before disclosure

Changelog mentions of security fixes: 5.2.2 (escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP ULike
4 May 20261,096
11 May 20263,164
18 May 202614,090
25 May 20267,406
1 Jun 202617,367
8 Jun 202617,178
15 Jun 202629,752
22 Jun 202617,179
29 Jun 20263,381
6 Jul 20263,988
13 Jul 20262,464
20 Jul 20262,383
27 Jul 20262,110
3 Aug 202630,643
10 Aug 20265,449
17 Aug 20262,862
24 Aug 202615,063
31 Aug 20264,999
7 Sep 20262,776
14 Sep 20263,263
21 Sep 20262,751
28 Sep 20262,213
5 Oct 202617,582
12 Oct 202615,142
19 Oct 20266,413
26 Oct 20264,727
2 Nov 2026449

Weekly downloads over the last 4 weeks are 24% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

WP-PostRatingsScore 100 · 20,000+kk Star RatingsScore 95 · 70,000+Rate My PostScore 94 · 20,000+

Facts

Version5.2.5
AuthorAlimir
Added28 Aug 2014
Last updated17 Oct 2026
Active installs60,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.3.0
CategoryCommunity & Social > Comments & Discussions
Tagslike, voting, reactions, like button, popular posts

Other plugins by this author: Blue Login Style, Ajax BootModal Login, Custom Fields Notifications

Questions

Is WP ULike still maintained?

Yes. Last release 17 Oct 2026, 29 releases in the last 24 months.

Who owns WP ULike, and has it changed hands?

No change recorded. Main committer alimir since Aug 2014.

Was WP ULike removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP ULike safe?

17 known vulnerabilities, all fixed (latest in 5.0.2). Not on the exploited list.

Is the latest WP ULike update safe to install?

No ownership change before 5.2.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue