CVE-2024-8729

CVE-2024-8729 affects the WordPress plugin Easy Social Share Buttons (versions ≤ 1.4.5). It enables Reflected Cross-Site Scripting via add_query_arg without proper escaping, allowing unauthenticated attackers to inject scripts in pages executed when a user is tricked into clicking a link. Exploit...

WordPress Easy Social Share Buttons plugin <= 1.4.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Easy Social Share Buttons versions = 1.4.5...

WordPress Easy Social Share Buttons Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)

Software Easy Social Share Buttons Type Plugin Vulnerable versions = 1.4.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8729 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID db873cfad5a2 Credits vgo0...

CVE-2024-47330

Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9...

CVE-2024-47330

CVE-2024-47330 concerns Missing Authorization (Broken Access Control) in WordPress plugins by Supsystic: Slider by Supsystic (versions ≤ 1.8.6) and Social Share Buttons by Supsystic (versions ≤ 2.2.9). Affected components are the plugins themselves, with root cause described as lack of authorizat...

WordPress plugin Social Share Buttons by Supsystic 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin...

PT-2024-32544 · Unknown · Social Share Buttons By Supsystic +1

Name of the Vulnerable Software and Affected Versions: Supsystic Slider versions 1.8.6 and earlier Supsystic Social Share Buttons versions 2.2.9 and earlier Description: The issue is related to a Missing Authorization vulnerability in Supsystic Slider and Supsystic Social Share Buttons. This allo...

CVE-2024-8363

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shortcode in all versions up to, and including, 2.02 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-8363

CVE-2024-8363 concerns the WordPress plugin Share This Image. It describes a Stored Cross-Site Scripting (XSS) flaw in the STI Buttons shortcode present in versions up to and including 2.02, caused by insufficient input sanitization and output escaping of user-supplied attributes. The issue requi...

WordPress Share This Image plugin <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via STI Buttons Shortcode vulnerability discovered by Krzysztof Zając in WordPress Plugin Share This Image versions = 2.02...

WordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muhammad Daffa in WordPress Plugin GetPaid versions = 2.8.11...

WordPress Floating Social Buttons plugin <= 1.5 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Yoshihito Kamata in WordPress Plugin Floating Social Buttons versions = 1.5...

WordPress Floating Social Buttons Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Floating Social Buttons Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-6405 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 99d69d9e8109 Credits Yoshihito Kamata...

CVE-2024-6405 Floating Social Buttons <= 1.5 - Cross-Site Request Forgery

The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the floatingsocialbuttonsoption function. This makes it possible for unauthenticated attackers to update...

PT-2024-37599 · WordPress · Floating Social Buttons

Name of the Vulnerable Software and Affected Versions: Floating Social Buttons plugin for WordPress versions up to, and including, 1.5 Description: The issue is due to missing or incorrect nonce validation on the floating social buttons option function, making it possible for unauthenticated...

WordPress plugin Floating Social Buttons security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode plugin <= 1.7 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode versions = 1.7...

CVE-2024-5448

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perfo...

CVE-2024-5448 PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perfo...

CVE-2024-5448 PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS

The PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode WordPress plugin through 1.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perfo...