CVE-2026-0909 | WP ULike Plugin up to 4.8.3.1 on WordPress wp_ulike_delete_history_api ID resource injection

A vulnerability marked as problematic has been reported in WP ULike Plugin up to 4.8.3.1 on WordPress. This vulnerability affects the function wp_ulike_delete_history_api. This manipulation of the argument ID causes improper control of resource identifiers.

This vulnerability appears as CVE-2026-0909. The attack may be initiated remotely. There is no available exploit.