1117 matches found
CVE-2022-0594
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated in v 9.7.5 and author+ in v9.7.5 users, allowing them to call it and retrieve various information such as t...
CVE-2022-0594
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated in v 9.7.5 and author+ in v9.7.5 users, allowing them to call it and retrieve various information such as t...
CVE-2022-0594: Incorrect Authorization
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated in v 9.7.5 and author+ in v9.7.5 users, allowing them to call it and retrieve various information such as t...
CVE-2022-33960
Multiple Authenticated subscriber or higher user role SQL Injection SQLi vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-27235
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-33960
Multiple Authenticated subscriber or higher user role SQL Injection SQLi vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-27235
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
Sql injection
Multiple Authenticated subscriber or higher user role SQL Injection SQLi vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
Improper access control
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-27235 WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-27235
CVE-2022-27235 covers multiple broken access control vulnerabilities in the WordPress Social Share Buttons by Supsystic plugin, affecting versions up to 2.2.3. The root cause is improper access control within the plugin’s features, enabling low-privilege users to perform unauthorized actions. Pub...
CVE-2022-33960
CVE-2022-33960 affects WordPress due to multiple authenticated SQL injection vulnerabilities in the Social Share Buttons by Supsystic plugin ≤ 2.2.3. The issue stems from inadequate input validation in the plugin, enabling authenticated users (subscriber or higher) to execute SQL commands. A fix ...
CVE-2022-33960 WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
Multiple Authenticated subscriber or higher user role SQL Injection SQLi vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
CVE-2022-27235: Undefined Security Weakness
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
WordPress plugin Social Share Buttons SQL注入漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Social Share Buttons 2.2.3 and prior versions, which stems from the application's lack of...
PT-2022-18318 · Supsystic · Social Share Buttons By Supsystic
Name of the Vulnerable Software and Affected Versions: Social Share Buttons by Supsystic plugin versions 2.2.3 and earlier Description: The issue concerns Multiple Broken Access Control vulnerabilities. No information is provided about the estimated number of potentially affected devices worldwid...
CVE-2022-33960: Improper Neutralization of Special Elements used in an SQL Command
Multiple Authenticated subscriber or higher user role SQL Injection SQLi vulnerabilities in Social Share Buttons by Supsystic plugin = 2.2.3 at WordPress...
PT-2022-21935
Name of the Vulnerable Software and Affected Versions Social Share Buttons by Supsystic plugin versions 2.2.3 and earlier Description The issue concerns multiple authenticated SQL Injection vulnerabilities. These vulnerabilities can be exploited by users with a subscriber or higher user role. The...
WordPress plugin Social Share Buttons 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress Social Share Buttons 2.2.3 and prior versions, which stems from an improper access contr...