Lucene search

CVE-2019-9978

🗓️ 24 Mar 2019 00:00:00Reported by AttackerKBType

The Social Warfare WordPress plugin before version 3.5.3 is vulnerable to stored XSS via swp_url paramete

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 26
Dsquare	WordPress Social Warfare 3.5.2 RCE	15 Apr 201900:00	–	dsquare
GithubExploit	Exploit for Cross-site Scripting in Warfareplugins Social Warfare	6 May 201920:11	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Warfareplugins Social Warfare	3 May 201905:57	–	githubexploit
Packet Storm	WordPress Social Warfare 3.5.2 Remote Code Execution	27 Jul 202100:00	–	packetstorm
Packet Storm	Wordpress Social Warfare Remote Code Execution	3 May 201900:00	–	packetstorm
CVE	CVE-2019-9978	24 Mar 201915:29	–	cve
0day.today	Wordpress Social Warfare Plugin 3.5.3 - Remote Code Execution Exploit	3 May 201900:00	–	zdt
0day.today	WordPress Social Warfare 3.5.2 Remote Code Execution Exploit	27 Jul 202100:00	–	zdt
The Hacker News	Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress	23 Apr 201918:04	–	thn
OSV	CVE-2019-9978	24 Mar 201915:29	–	osv

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
exploit-db	www.exploit-db.com/exploits/46794
exploit-db	www.exploit-db.com/exploits/46794/
wpvulndb	www.wpvulndb.com/vulnerabilities/9238
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2019032105
blog	www.blog.sucuri.net/2019/03/zero-day-stored-xss-in-social-warfare.html
wordfence	www.wordfence.com/blog/2019/03/unpatched-zero-day-vulnerability-in-social-warfare-plugin-exploited-in-the-wild
pluginvulnerabilities	www.pluginvulnerabilities.com/2019/03/21/full-disclosure-of-settings-change-persistent-cross-site-scripting-xss-vulnerability-in-social-warfare
wordpress	www.wordpress.org/plugins/social-warfare
twitter	www.twitter.com/warfareplugins/status/1108852747099652099

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Mar 2019 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS24.3

CVSS36.1

EPSS0.88916