The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of...
5.4CVSS
5.2AI Score
0.001EPSS
6.1CVSS
6.3AI Score
0.001EPSS
9.8CVSS
9.9AI Score
0.001EPSS