Show filters
519 Total Results
Displaying 201-210 of 519
Sort by:
Attacker Value
Unknown

CVE-2023-48329

Disclosure Date: November 30, 2023 (last updated February 25, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard Fast Custom Social Share by CodeBard allows Stored XSS.This issue affects Fast Custom Social Share by CodeBard: from n/a through 1.1.1.
Attacker Value
Unknown

CVE-2023-48336

Disclosure Date: November 30, 2023 (last updated February 25, 2025)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4.
Attacker Value
Unknown

CVE-2023-5845

Disclosure Date: November 27, 2023 (last updated December 02, 2023)
The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags
Attacker Value
Unknown

CVE-2023-26532

Disclosure Date: November 22, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versions.
Attacker Value
Unknown

CVE-2023-46619

Disclosure Date: November 13, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in WebDorado WDSocialWidgets plugin <= 1.0.15 versions.
Attacker Value
Unknown

CVE-2023-28694

Disclosure Date: November 12, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions.
Attacker Value
Unknown

CVE-2023-29428

Disclosure Date: November 10, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in SuPlugins Superb Social Media Share Buttons and Follow Buttons for WordPress plugin <= 1.1.3 versions.
Attacker Value
Unknown

CVE-2023-47229

Disclosure Date: November 08, 2023 (last updated February 25, 2025)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 versions.
Attacker Value
Unknown

CVE-2023-47227

Disclosure Date: November 08, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one place plugin <= 1.5.4.6 versions.
Attacker Value
Unknown

CVE-2023-5661

Disclosure Date: November 07, 2023 (last updated February 25, 2025)
The Social Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialfeed' shortcode in all versions up to, and including, 1.5.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with author-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.