Lucene search
K

37 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:49 p.m.9 views

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

6.8CVSS6.8AI score0.00275EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-9143

Malware in sbrugna...

6.1CVSS6.3AI score0.00403EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-4636

Malware in sbrugna...

6.8CVSS6.3AI score0.00275EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-49953

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00149EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:25 a.m.4 views

CVE-2022-47178

Cross-Site Request Forgery CSRF vulnerability in Simple Share Buttons Simple Share Buttons Adder plugin = 8.4.7 versions...

8.8CVSS7.1AI score0.00149EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:47 a.m.3 views

CVE-2015-9303

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...

6.1CVSS7.1AI score0.00403EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/17 9:4 p.m.5 views

CVE-2024-7556

The Simple Share WordPress plugin through 0.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00236EPSS
Exploits1References1
OSV
OSV
added 2025/05/15 8:15 p.m.2 views

CVE-2024-7556

The Simple Share WordPress plugin through 0.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00236EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/15 8:7 p.m.7 views

CVE-2024-7556 Wordpress Simple Share Plugin <=0.5.3 - Admin+ XSS

The Simple Share WordPress plugin through 0.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00236EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.0 views

WordPress plugin Simple Share 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.8CVSS5.8AI score0.00236EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.2 views

PT-2025-21499 · WordPress · The Simple Share Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Simple Share WordPress plugin versions 0.5.3 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...

4.8CVSS5.2AI score0.00236EPSS
Exploits1References4
Patchstack
Patchstack
added 2024/08/15 3:9 a.m.3 views

WordPress Wordpress Simple Share Plugin plugin <= 0.5.3 - Admin+ XSS vulnerability

Admin+ XSS vulnerability discovered by Amandeep Singh Banga in WordPress Plugin Simple Share versions = 0.5.3...

4.8CVSS6.4AI score0.00236EPSS
Exploits1References1Affected Software1
Patchstack
Patchstack
added 2024/08/15 12:0 a.m.10 views

WordPress Simple Share Plugin <= 0.5.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Share Type Plugin Vulnerable versions = 0.5.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7556 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8e1bd7bd32f7 Credits Amandeep Singh Banga Required...

5.6AI score0.00236EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/06/18 6:15 a.m.1 views

CVE-2024-4094

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

5.4CVSS5.8AI score0.0038EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/06/18 6:0 a.m.19 views

CVE-2024-4094 Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

0.0038EPSS
Exploits2References1
Patchstack
Patchstack
added 2024/05/28 12:0 a.m.11 views

WordPress Simple Share Buttons Adder Plugin < 8.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Simple Share Buttons Adder Type Plugin Vulnerable versions 8.5.1 Fixed in 8.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4094 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 47ccb3022e74 Credits Dmitrii Ignatye...

5.4CVSS5.7AI score0.0038EPSS
Exploits2References3Affected Software1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.1 views

WordPress Plugin Simple Share Buttons Adder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

4.8CVSS5.9AI score0.00282EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/02/14 12:0 a.m.9 views

WordPress Simple Share Buttons Adder Plugin <= 8.4.11 is vulnerable to Cross Site Scripting (XSS)

Software Simple Share Buttons Adder Type Plugin Vulnerable versions = 8.4.11 Fixed in 8.4.12 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0621 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID 449c4b786154 Credits Akbar...

4.8CVSS5.7AI score0.00282EPSS
Exploits0References3Affected Software1
Patchstack
Patchstack
added 2023/08/03 12:0 a.m.2 views

WordPress Simple Share Follow Button Plugin <= 1.03 is vulnerable to Cross Site Scripting (XSS)

Software Simple Share Follow Button Type Plugin Vulnerable versions = 1.03 Fixed in 1.04 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 358cf0bf8f7d Credits Unknown Required privileg...

6AI score
Exploits0References2Affected Software1
OSV
OSV
added 2023/05/25 12:15 p.m.0 views

CVE-2022-47178

Cross-Site Request Forgery CSRF vulnerability in Simple Share Buttons Simple Share Buttons Adder plugin = 8.4.7 versions...

8.8CVSS5.8AI score0.00149EPSS
Exploits0References1
Rows per page
Query Builder