CVE-2022-1626

The CVE records CVE-2022-1626 for the WordPress Sharebar plugin (versions ≤ 1.4.1). The vulnerability is a CSRF flaw in settings updates combined with insufficient sanitisation/escaping, enabling a logged-in admin to change settings via CSRF and potentially trigger stored XSS. Impact is described...

CVE-2012-6719

CVE-2012-6719 affects the WordPress “Sharebar” plugin prior to version 1.2.2. The vulnerability is a SQL injection in the plugin’s handling of input, enabling an attacker to execute arbitrary SQL commands against the WordPress database. The CVE is documented with a high/severe impact profile (CVS...

CVE-2012-6718

CVE-2012-6718 affects the WordPress Sharebar plugin prior to version 1.2.2. The provided connected documents identify an cross-site scripting (XSS) vulnerability in that plugin, consistent across multiple sources, with variants described as XSS rather than the CSRF issues of CVE-2013-3491. The ro...