CVE-2013-6280

CVE-2013-6280 describes an XSS vulnerability in the WordPress plugin Social Sharing Toolkit prior to version 2.1.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with impact described as enabling partial integrity compromise and no confidentialit...

CVE-2013-2701

The CVE concerns the WordPress plugin Social Sharing Toolkit version 2.1.1, where a Cross-Site Request Forgery (CSRF) vulnerability allows remote attackers to hijack administrator sessions and perform plugin-setting changes. The root cause is CSRF in the plugin’s handling of requests that mutate ...