TI-2013-01724 CVE-2013-1949 · GHSA-rrq6-v27h-8979Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally…Priority LOW 27Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload of arbitrary files.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02374 · Published 2013-04-25 · No fix listed