82 matches found
Super Socializer < 7.13.52 - Cross-Site Scripting
The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-2779 info: name: Super Socializer 7.13.52 - Cross-Site Scripting author: r3Y3r53...
CVE-2026-65544
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65544
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
EUVD-2026-53974
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65544
The vulnerability CVE-2026-65544 affects the WordPress plugin Super Socializer (versions <= 7.14.5). It is an unauthenticated Cross-Site Scripting (XSS) flaw in the plugin’s handling of input, with a CVSS v3.1 base score of 7.1 (HIGH) and network attack vector, requiring user interaction. No e...
CVE-2026-65542 WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-65542
CVE-2026-65542 concerns the WordPress WordPress Super Socializer plugin, affected versions
CVE-2026-65542 WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
EUVD-2026-53972
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-65544: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65542: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by lqc in WordPress Plugin Super Socializer versions = 7.14.5...
WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Super Socializer versions = 7.14.5...
WordPress Super Socializer <7.13.30 - Cross-Site Scripting Detection
WordPress Super Socializer plugin before 7.13.30 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response...
PT-2026-68543
Name of the Vulnerable Software and Affected Versions Super Socializer versions prior to 7.14.6 Description The Super Socializer plugin for WordPress contains a broken authentication flaw. This issue occurs due to a missing capability check within a function, allowing unauthenticated attackers to...
PT-2026-68545
Name of the Vulnerable Software and Affected Versions Super Socializer versions prior to 7.14.6 Description Stored Cross-Site Scripting XSS occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which...