Show filters
36 Total Results
Displaying 31-36 of 36
Sort by:
Attacker Value
Unknown
CVE-2021-36849
Disclosure Date: June 16, 2022 (last updated February 24, 2025)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin <= 3.8.1 at WordPress.
0
Attacker Value
Unknown
CVE-2022-27235
Disclosure Date: June 09, 2022 (last updated February 24, 2025)
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
0
Attacker Value
Unknown
CVE-2022-33960
Disclosure Date: June 09, 2022 (last updated February 24, 2025)
Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
0
Attacker Value
Unknown
CVE-2021-36890
Disclosure Date: May 27, 2022 (last updated February 23, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress.
0
Attacker Value
Unknown
CVE-2021-24486
Disclosure Date: August 23, 2021 (last updated February 23, 2025)
The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
0
Attacker Value
Unknown
CVE-2018-11632
Disclosure Date: May 31, 2018 (last updated November 26, 2024)
An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There's no nonce or capability check in the whatsapp_share_setting_add_update() function.
0
