Lucene search
+L

4757 matches found

NVD
NVD
added 2023/10/06 1:15 p.m.24 views

CVE-2023-25033

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

8.8CVSS6.5AI score0.00246EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/06 1:15 p.m.21 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

6.8CVSS8.8AI score0.00246EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/06 12:49 p.m.15 views

CVE-2023-25033 WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

5.4CVSS7.4AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/06 12:49 p.m.31 views

CVE-2023-25033 WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Sumo Social Share Boost plugin = 4.5 versions...

5.4CVSS9AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/06 12:49 p.m.76 views

CVE-2023-25033

CVE-2023-25033 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Social Share Boost (also referred to as Sumo Social Share Boost) for versions 4.5 or apply vendor advisories as available in the provided sources.

8.8CVSS7AI score0.00246EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/06 12:00 a.m.13 views

PT-2023-19884 · WordPress · Sumo Social Share Boost

Name of the Vulnerable Software and Affected Versions: Sumo Social Share Boost plugin versions = 4.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

8.8CVSS8.8AI score0.00246EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/10/06 12:00 a.m.15 views

WordPress Plugin social-share-boost Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

8.8CVSS6.6AI score0.00246EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/05 12:00 a.m.14 views

WordPress Social Media Share Buttons & Social Sharing Icons Plugin < 2.8.4 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.1CVSS6.5AI score0.00402EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/02 10:15 a.m.29 views

CVE-2023-44239

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jobin Jose WWM Social Share On Image Hover plugin = 2.2 versions...

5.9CVSS5.4AI score0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/02 9:30 a.m.32 views

CVE-2023-44239 WordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jobin Jose WWM Social Share On Image Hover plugin = 2.2 versions...

5.9CVSS5.5AI score0.00336EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/10/02 9:30 a.m.24 views

CVE-2023-44239 WordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jobin Jose WWM Social Share On Image Hover plugin = 2.2 versions...

5.9CVSS5.6AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/02 9:30 a.m.80 views

CVE-2023-44239

CVE-2023-44239 is a stored XSS vulnerability in the WordPress plugin “WWM Social Share On Image Hover” affecting versions ≤ 2.2. Exploitation requires authenticated admin+ privileges. The available connected docs indicate the issue is ongoing with no published patch in the sources, and there is n...

5.9CVSS5.1AI score0.00336EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/02 12:00 a.m.10 views

WordPress Plugin wwm-social-share-on-image-hover Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.00336EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/09/29 12:00 a.m.16 views

WordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)

Software WWM Social Share On Image Hover Type Plugin Vulnerable versions = 2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-44239 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 48b7943db37c Credits DoYeon Park p6rkdoye0n...

5.9CVSS6.5AI score0.00336EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/09/28 8:15 p.m.11 views

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...

6.5CVSS5.8AI score0.0186EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2023/09/28 8:15 p.m.9 views

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...

6.5CVSS5.8AI score0.0186EPSS
SaveExploits2References3
CVE
CVE
added 2023/09/27 11:58 a.m.75 views

CVE-2023-41238

The CVE-2023-41238 entry concerns the WordPress plugin Ultimate Social Media Icons & Social Sharing Icons (often listed as Social Media Share Buttons & Social Sharing Icons) with versions

7.1CVSS6AI score0.00402EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/27 11:58 a.m.37 views

CVE-2023-41238 WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin = 2.8.3 versions...

7.1CVSS6.4AI score0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/27 11:58 a.m.12 views

CVE-2023-41238 WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin = 2.8.3 versions...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.13 views

WordPress plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References2
Rows per page
Query Builder