Read the docs

Supsystic

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high33CVSS 7.0–8.9

Exploited now

Supsystic records in CISA KEV

No Supsystic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Popup 10 records HIGH Easy Google Maps 6 records LOW Social Share Buttons 5 records MEDIUM Contact Form 3 records MEDIUM Data Tables Generator 3 records MEDIUM Photo Gallery 3 records LOW Pricing Table By Supsystic 3 records LOW Digital Publications By Supsystic 2 records LOW

Records

5 records in Social Share Buttons · all components

TI-2022-14956 CVE-2022-33960 · GHSA-f55m-jv7g-wxvq

SQL injection in Supsystic Social Share Buttons by Supsystic

Priority MEDIUM 40

Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00966 Published 2022-07-22 No fix listed CWE-89
TI-2024-31648 CVE-2024-47330 · GHSA-833q-6rf3-p3gr

Broken Access Control vulnerability on multiple WordPress plugins by Supsystic

Priority LOW 38

Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00346 Published 2024-09-26 No fix listed CWE-862
TI-2022-01523 CVE-2022-1653 · GHSA-963p-r75x-r5f8

Social Share Buttons by Supsystic < 2.2.4 - Multiple CSRF

Priority LOW 20

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00429 Published 2022-06-27 Fixed in 2.2.4 CWE-352
Open these records in search →