CVE-2024-2189

CVE-2024-2189 affects the WordPress plugin Social Icons Widget & Block by WPZOOM (before 4.2.18). The issue is improper sanitization/escaping of several widget settings, enabling Stored XSS by high-privilege users (e.g., administrators), even when unfiltered_html is disallowed (such as in multisi...

CVE-2024-30464

CVE-2024-30464 is a Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM (affecting Social Icons Widget & Block by WPZOOM up to version 4.2.15). Public data from NVD lists CVSS v3.1 base score 8.8 (High), with NETWORK attack vector, low attack complexity, and privil...