Sumo

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Sumo records in CISA KEV

No Sumo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Google Analyticator 4 records HIGH Social Share Boost 3 records LOW

Records

7 records

TI-2022-03959 CVE-2022-4323 · GHSA-wfcf-c7x5-2q5g

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

HIGH 67

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01057 Published 2023-01-23 Fixed in 6.5.6

TI-2022-03163 CVE-2022-3425 · GHSA-345r-2rqp-m78h

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

HIGH 67

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01057 Published 2023-01-23 Fixed in 6.5.6

TI-2015-03931 CVE-2015-4697 · GHSA-jxm5-5gwc-5hh6

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

MEDIUM 41

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01249 Published 2017-09-07 No fix listed CWE-352

TI-2023-10506 CVE-2023-25033 · GHSA-mj8c-5c4j-5q58

WordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-10-06 No fix listed CWE-352

TI-2023-09502 CVE-2023-23688 · GHSA-365v-p82c-m3cj

WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-05-15 No fix listed CWE-79

TI-2009-04902 CVE-2009-5158 · GHSA-fw7j-vc63-x5gf

The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML…

LOW 29

The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-22 No fix listed CWE-20

TI-2023-10517 CVE-2023-25044 · GHSA-35g9-c897-73x7

WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-09-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	3
Low	0
No CVSS	0