CVE-2024-3583 Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

🗓️ 30 May 2024 10:59:28Reported by WordfenceType

Stored XSS in Simple Like Page Plugin v1.5.2

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2024-3583	30 May 202410:59	–	cve
EUVD	EUVD-2024-32163	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3583	30 May 202411:15	–	nvd
Patchstack	WordPress Simple Like Page Plugin plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability	30 May 202400:04	–	patchstack
Patchstack	WordPress Simple Like Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)	30 May 202400:00	–	patchstack
Positive Technologies	PT-2024-26755 · WordPress · Simple Like Page Plugin	30 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3583	23 May 202509:24	–	redhatcve
Vulnrichment	CVE-2024-3583 Simple Like Page Plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	30 May 202410:59	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 27, 2024 to June 2, 2024)	6 Jun 202415:09	–	wordfence
WPVulnDB	Simple Like Page Plugin < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	29 May 202400:00	–	wpvulndb

[
  {
    "vendor": "topdevs",
    "product": "Simple Like Page Plugin – Fast & Privacy-Friendly Page Embeds",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.5.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/070f6820-e70c-4325-b5cb-d2010da34dce
plugins	www.plugins.trac.wordpress.org/changeset/3092346/simple-facebook-plugin/trunk

08 Apr 2026 16:33Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.4

EPSS0.00311

CWE-79