WordPress Share Buttons – Social Media Plugin <= 1.0.2 is vulnerable to SQL Injection

Software Share Buttons – Social Media Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51845 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID c8254280abdb Credits LVT-tholv2k Required privilege...

CVE-2024-10687 Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injection

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient...

CVE-2024-9219

The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.19. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-9219

CVE-2024-9219 affects the WordPress Social Share Buttons plugin for WordPress (versions

CVE-2024-9219 WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting

The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.19. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-9219 WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting

The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.19. This makes it possible for unauthenticated attackers to inject arbitrary web...

WordPress plugin WordPress Social Share Buttons 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress Social Share Buttons plugin <= 1.19 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Social Share Buttons versions = 1.19...

WordPress Social Share Buttons Plugin <= 1.19 is vulnerable to Cross Site Scripting (XSS)

Software Social Share Buttons Type Plugin Vulnerable versions = 1.19 Fixed in 1.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9219 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 38e78d810a01 Credits Colin Xu Requir...

CVE-2024-8729

The Easy Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2024-8729 Easy Social Share Buttons <= 1.4.5 - Reflected Cross-Site Scripting

The Easy Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.4.5. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2024-8729

CVE-2024-8729 affects the WordPress plugin Easy Social Share Buttons (versions ≤ 1.4.5). It enables Reflected Cross-Site Scripting via add_query_arg without proper escaping, allowing unauthenticated attackers to inject scripts in pages executed when a user is tricked into clicking a link. Exploit...

WordPress Easy Social Share Buttons plugin <= 1.4.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Easy Social Share Buttons versions = 1.4.5...

WordPress Easy Social Share Buttons Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Easy Social Share Buttons Type Plugin Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8729 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID db873cfad5a2 Credits vgo0...

CVE-2024-47330

Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9...

CVE-2024-47330

CVE-2024-47330 concerns Missing Authorization (Broken Access Control) in WordPress plugins by Supsystic: Slider by Supsystic (versions ≤ 1.8.6) and Social Share Buttons by Supsystic (versions ≤ 2.2.9). Affected components are the plugins themselves, with root cause described as lack of authorizat...

WordPress plugin Social Share Buttons by Supsystic 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-32544 · Unknown · Social Share Buttons By Supsystic +1

Name of the Vulnerable Software and Affected Versions: Supsystic Slider versions 1.8.6 and earlier Supsystic Social Share Buttons versions 2.2.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Supsystic Slider and Supsystic Social Share Buttons. This allo...

CVE-2024-4094

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-4094 Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...