CVE-2023-5070

CVE-2023-5070 affects the WordPress plugin “Social Media Share Buttons & Social Sharing Icons” (slug: ultimate-social-media-icons) up to and including version 2.8.5. Root cause: sfsi_save_export export flow allows exporting plugin settings, exposing sensitive data (social tokens, secrets, app pas...

WordPress Social Media & Share Icons Plugin <= 2.8.5 is vulnerable to Sensitive Data Exposure

Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.8.5 Fixed in 2.8.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5070 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 041c1c8cf3d2 Credits Marco...