Zodan Like Button Security & Risk Analysis

wordpress.org/plugins/z-like-button

Display a very simple and customisable like button for your posts or any custom post type.

0 active installs v0.0.7 PHP + WP 5.5+ Updated Unknown
buttoncustom-likelikelike-button
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Zodan Like Button Safe to Use in 2026?

Generally Safe

Score 100/100

Zodan Like Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "z-like-button" plugin v0.0.7 exhibits a strong security posture based on the provided static analysis. The absence of dangerous functions, reliance on prepared statements for all SQL queries, and a high percentage of properly escaped outputs are excellent indicators. Furthermore, the plugin implements nonce and capability checks on entry points where applicable, which significantly reduces the risk of common web vulnerabilities. The lack of any recorded vulnerabilities in its history further reinforces this positive assessment. However, while the current analysis reveals no critical flaws, the presence of 4 AJAX handlers and 2 shortcodes as entry points, though reported as protected, warrant continued vigilance. The absence of taint analysis data prevents a full understanding of potential data flow risks, and it's always prudent to monitor for future vulnerabilities.

Key Concerns

  • High percentage of unescaped output
  • Limited taint analysis data
Vulnerabilities
None known

Zodan Like Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Zodan Like Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
15
83 escaped
Nonce Checks
3
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

85% escaped98 total outputs
Attack Surface

Zodan Like Button Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 4

authwp_ajax_zodan_like_buttonz-like-button.php:36
noprivwp_ajax_zodan_like_buttonz-like-button.php:37
authwp_ajax_zodan_like_button_removez-like-button.php:39
noprivwp_ajax_zodan_like_button_removez-like-button.php:40

Shortcodes 2

[zodan_like_button] z-like-button.php:45
[zodan_like_button_likes_list] z-like-button.php:46
WordPress Hooks 10
actionwp_enqueue_scriptsz-like-button.php:28
actionwp_enqueue_scriptsz-like-button.php:29
actionadd_meta_boxesz-like-button.php:30
actionadmin_enqueue_scriptsz-like-button.php:31
actionsave_postz-like-button.php:51
actionadmin_menuz-like-button.php:57
actionadmin_initz-like-button.php:58
filterthe_contentz-like-button.php:64
filterthe_contentz-like-button.php:65
filteradmin_footer_textz-like-button.php:344
Maintenance & Trust

Zodan Like Button Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedUnknown
PHP min version
Downloads807

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Zodan Like Button Developer Profile

martenmoolenaar

6 plugins · 80 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Zodan Like Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/z-like-button/css/style.css/wp-content/plugins/z-like-button/js/script.js
Script Paths
/wp-content/plugins/z-like-button/js/script.js
Version Parameters
z-like-button/css/style.css?ver=z-like-button/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
zodan-like-button-buttonzodan-like-button-heart-iconzodan-like-button-heart-icon-liked
Data Attributes
data-post-iddata-noncedata-action
JS Globals
zodan_like_button_ajax_object
REST Endpoints
/wp-json/zodan-like-button/v1/like/wp-json/zodan-like-button/v1/unlike
Shortcode Output
[zodan_like_button][zodan_like_button_likes_list]
FAQ

Frequently Asked Questions about Zodan Like Button