Lucene search
+L

79 matches found

RedhatCVE
RedhatCVE
added 2025/04/12 8:58 a.m.17 views

CVE-2025-32282

Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through = 3.2.3...

4.3CVSS7.2AI score0.00145EPSS
Exploits0References1
NVD
NVD
added 2025/04/10 8:15 a.m.14 views

CVE-2025-32282

Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through = 3.2.3...

4.3CVSS0.00145EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/10 8:9 a.m.22 views

CVE-2025-32282 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through = 3.2.3...

4.3CVSS0.00145EPSS
Exploits0References1
CVE
CVE
added 2025/04/10 8:9 a.m.75 views

CVE-2025-32282

CVE-2025-32282 affects the ShareThis Dashboard for Google Analytics WordPress plugin. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Dashboard component, affecting versions from n/a through 3.2.2. The CVE entry lists a CVSS v3.1 base score of 4.3 (Medium) , with no confiden...

4.3CVSS7.2AI score0.00145EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 8:9 a.m.7 views

CVE-2025-32282 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ShareThis ShareThis Dashboard for Google Analytics. This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.2.2...

4.3CVSS7AI score0.00145EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/10 12:0 a.m.3 views

WordPress plugin ShareThis Dashboard for Google Analytics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6AI score0.00145EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/10 12:0 a.m.10 views

PT-2025-15962 · Sharethis · Sharethis Dashboard For Google Analytics

Name of the Vulnerable Software and Affected Versions: ShareThis Dashboard for Google Analytics versions 3.2.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

4.3CVSS5.4AI score0.00145EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/04/04 1:43 p.m.9 views

WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ShareThis Dashboard for Google Analytics versions = 3.2.3...

4.3CVSS8.2AI score0.00145EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2025/03/19 12:0 a.m.7 views

WordPress ShareThis Dashboard for Google Analytics plugin authorization issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

5.3CVSS7AI score0.00258EPSS
Exploits0References1
OSV
OSV
added 2025/03/14 9:15 a.m.3 views

CVE-2025-1507

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

5.3CVSS7.3AI score0.00258EPSS
Exploits0References2
NVD
NVD
added 2025/03/14 9:15 a.m.19 views

CVE-2025-1507

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

5.3CVSS0.00258EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/14 8:23 a.m.17 views

CVE-2025-1507 ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

5.3CVSS0.00258EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/14 8:23 a.m.15 views

CVE-2025-1507 ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleactions function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all...

5.3CVSS5.1AI score0.00258EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/14 12:0 a.m.3 views

WordPress plugin ShareThis Dashboard for Google Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

5.3CVSS6.6AI score0.00258EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/03/13 9:11 p.m.5 views

WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation vulnerability

Missing Authorization to Unauthenticated Feature Deactivation vulnerability discovered by m3ssap0 in WordPress Plugin ShareThis Dashboard for Google Analytics versions = 3.2.1...

5.3CVSS8.8AI score0.00258EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/05/23 10:20 a.m.6 views

WordPress ShareThis Share Buttons plugin <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Krzysztof Zając in WordPress Plugin ShareThis Share Buttons versions = 2.3.0...

6.4CVSS5.7AI score0.00257EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/05/23 7:15 a.m.6 views

CVE-2024-3648

The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

5.4CVSS5.9AI score0.00257EPSS
Exploits0References2
NVD
NVD
added 2024/05/23 7:15 a.m.18 views

CVE-2024-3648

The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.9AI score0.00257EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/23 6:46 a.m.21 views

CVE-2024-3648 ShareThis Share Buttons <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode

The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.9AI score0.00257EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/23 6:46 a.m.8 views

CVE-2024-3648 ShareThis Share Buttons <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode

The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...

6.4CVSS5.8AI score0.00257EPSS
Exploits0References2
Rows per page
Query Builder