32 matches found
EUVD-2012-6560
Malware in sbrugna...
CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
CVE-2012-6719
The sharebar plugin before 1.2.2 for WordPress has SQL injection...
CVE-2012-6718
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
WordPress Easy Social Sharebar Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Easy Social Sharebar Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51833 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 39ebcdfedab1 Credits SOPROBRO Required privilege...
CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
WordPress plugin Sharebar has a cross-site request forgeing vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Sharebar plugin prior to 1.4.1 are vulnerable to cross-site request...
WordPress Sharebar plugin <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF vulnerability
Arbitrary Settings Update to Stored XSS via CSRF vulnerability discovered by Daniel Ruf in WordPress Sharebar plugin versions = 1.4.1. Solution Deactivate and delete. This plugin has been closed as of June 14, 2022 and is not available for download. This closure is temporary, pending a full revie...
WordPress sharebar plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A SQL injection vulnerability exists in the WordPress sharebar plugi...
WordPress sharebar plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A cross-site scripting vulnerability exists in the WordPress shareba...
CVE-2012-6718
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
Sql injection
The sharebar plugin before 1.2.2 for WordPress has SQL injection...
Design/Logic Flaw
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
CVE-2012-6719
The sharebar plugin before 1.2.2 for WordPress has SQL injection...
CVE-2012-6718
The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491...
CVE-2012-6719
The sharebar plugin before 1.2.2 for WordPress has SQL injection...
CVE-2012-6719
CVE-2012-6719 affects the WordPress “Sharebar” plugin prior to version 1.2.2. The vulnerability is a SQL injection in the plugin’s handling of input, enabling an attacker to execute arbitrary SQL commands against the WordPress database. The CVE is documented with a high/severe impact profile (CVS...