Lucene search

CVE-2024-1959

🗓️ 02 May 2024 17:14:15Reported by [email protected]Type

Vulnerability in Social Warfare WordPress plugin allows for Stored Cross-Site Scripting via 'socialWarfare' shortcode in versions up to 4.4.6.1

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2024-1959	2 May 202417:15	–	nvd
WPVulnDB	Social Sharing Plugin – Social Warfare < 4.4.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode	22 Apr 202400:00	–	wpvulndb
Cvelist	CVE-2024-1959	2 May 202416:51	–	cvelist
Vulnrichment	CVE-2024-1959	2 May 202416:51	–	vulnrichment
Patchstack	WordPress Social Warfare Plugin <= 4.4.6.1 is vulnerable to Cross Site Scripting (XSS)	23 Apr 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)	2 May 202414:49	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/social-warfare/tags/4.4.5.1/lib/buttons-panel/SWP_Buttons_Panel_Shortcode.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1016f16c-0ab2-4cac-a7a5-8d93a37e7894

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 May 2024 17:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS36.4

EPSS0.001