69 matches found
CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
Cross site scripting
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
CVE-2022-1626 Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
CVE-2022-1626
The CVE records CVE-2022-1626 for the WordPress Sharebar plugin (versions ≤ 1.4.1). The vulnerability is a CSRF flaw in settings updates combined with insufficient sanitisation/escaping, enabling a logged-in admin to change settings via CSRF and potentially trigger stored XSS. Impact is described...
PT-2022-14011
Name of the Vulnerable Software and Affected Versions Sharebar WordPress plugin versions 1.4.1 and earlier Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This also leads to a...
WordPress plugin Sharebar 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Sharebar plugin prior to 1.4.1 are vulnerable to cross-site request...
CVE-2022-1626: Cross-Site Request Forgery (CSRF)
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of them PoC...
WordPress Sharebar plugin <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability
Arbitrary Settings Update to Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Sharebar plugin versions = 1.4.1. Solution Deactivate and delete. This plugin has been closed as of June 14, 2022 and is not available for download. This closure is temporary, pending a full revie...
Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of them test1" test2"...
WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin <= 1.7.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin versions = 1.7.0. Solution Update the WordPress Go Viral – social share, social...
WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Go Viral – social share, social sharebar, social locker, social chat, open graph, reactions, share & view counters plugin versions = 1.7.0. Solution Update the WordPress Go Viral – social share, social sharebar, social locker,...
WordPress sharebar plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A cross-site scripting vulnerability exists in the WordPress shareba...
WordPress sharebar plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A SQL injection vulnerability exists in the WordPress sharebar plugi...
CVE-2012-6718
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
CVE-2012-6719
The sharebar plugin before 1.2.2 for WordPress has SQL injection...
CVE-2012-6718
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
Design/Logic Flaw
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...