Lucene search
K

6 matches found

CVE
CVE
added 2026/01/14 6:40 a.m.6 views

CVE-2025-14846

The CVE-2025-14846 entry concerns the WordPress SocialChamp plugin (SocialChamp with WordPress) up to version 1.3.3. The issue is a Cross-Site Request Forgery (CSRF) due to missing nonce validation in the wpsc_settings_tab_menu function, allowing unauthenticated attackers to modify plugin setting...

4.3CVSS5.8AI score0.00024EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/14 6:40 a.m.2 views

CVE-2025-14846 SocialChamp with WordPress <= 1.3.5 - Cross-Site Request Forgery to Plugin Settings Update

The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.5. This is due to missing nonce validation on the wpscsettingstabmenu function. This makes it possible for unauthenticated attackers to modify plugin settings...

4.3CVSS5.7AI score0.00024EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/14 6:40 a.m.22 views

CVE-2025-14846 SocialChamp with WordPress <= 1.3.5 - Cross-Site Request Forgery to Plugin Settings Update

The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.5. This is due to missing nonce validation on the wpscsettingstabmenu function. This makes it possible for unauthenticated attackers to modify plugin settings...

4.3CVSS0.00024EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/14 12:0 a.m.3 views

WordPress plugin SocialChamp with WordPress 跨站请求伪造漏洞

WordPress SocialChamp with WordPress plugin is a plugin called SocialChamp which focuses on social media automation management. WordPress SocialChamp with WordPress plugin suffers from a cross-site request forgery vulnerability that stems from a lack of random number validation in the...

4.3CVSS5.7AI score0.00024EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.4 views

PT-2026-2836

The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3. This is due to missing nonce validation on the wpsc settings tab menu function. This makes it possible for unauthenticated attackers to modify plugin settin...

4.3CVSS5.2AI score0.00024EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/13 11:8 p.m.4 views

WordPress SocialChamp with WordPress plugin <= 1.3.3 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by afnaan - SMKN 1 Bantul in WordPress Plugin SocialChamp with WordPress versions = 1.3.3...

4.3CVSS7AI score0.00024EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder