Read the docs

Pluginmirror

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pluginmirror records in CISA KEV

No Pluginmirror vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Social Stickers 1 record LOW Wp Quick Frontend Editor 1 record LOW

Records

1 record in Social Stickers · all components

TI-2022-01299 CVE-2022-1418 · GHSA-5r8p-c5pv-rv87

Social Stickers <= 2.2.9 - Stored Cross-Site Scripting via CSRF

Priority LOW 27

The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00399 Published 2022-05-16 No fix listed CWE-352
Open these records in search →