PT-2022-20083

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /sns/admin/?page=user/manage user&id= endpoint. The id parameter is vulnerable to injection attacks. Thi...

WordPress Simple Social Page Widget & Shortcode plugin <= 1.7.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Simple Social Page Widget & Shortcode plugin versions = 1.7.0. Solution No patched version available...

CVE-2021-24656: Improper Neutralization of Input During Web Page Generation

The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts depending on the settings used, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml...

PT-2021-16169

Name of the Vulnerable Software and Affected Versions Simple Social Media Share Buttons WordPress plugin versions prior to 3.2.4 Description The issue allows high privilege users to perform Cross-Site Scripting attacks. This is due to the plugin not escaping the Share Title settings before...

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress Simple Social Media Share Buttons plugin prior...

CVE-2021-24486: Improper Neutralization of Input During Web Page Generation

The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and likebuttonsize parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

PT-2021-16009

Name of the Vulnerable Software and Affected Versions The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin versions prior to 3.2.3 Description The issue concerns the SSB shortcode in the plugin, where the align and like button size parameters are not properly...

Simple Social Buttons < 3.2.0 - Reflected Cross-Site Scripting

Simple Social Buttons version 3.1.1 has a reflected Cross-Site Scripting vulnerability in the POST parameter "sharecounts". Both unauthenticated and authenticated attacks are possible Edit WPScanTeam The original report stated the issue as being fixed in 3.2.0, however a CSRF nonce has been added...

WordPress Simple Social Buttons 3.1.1 Cross Site Scripting

The WordPress plugin Simple Social Buttons version 3.1.1 a.k.a. Simple Social Media Share Buttons suffers from a reflected cross-site scripting vulnerability found by Mr.F. It was fixed in version 3.2.0: https://wordpress.org/plugins/simple-social-buttons/developers HTML POC: xss poc...

WordPress Simple Social Buttons Plugin 2.0.4 < 2.0.22 Privilege Escalation Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Critical WordPress Plugin Flaw Allows Complete Website Takeover

A critical vulnerability in popular WordPress plugin Simple Social Buttons enables non-admin users to modify WordPress installation options – and ultimately take over websites. Simple Social Buttons enables users to add social-media sharing buttons to various locations of their websites. The plug...