Read the docs

warfareplugins

Records9All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

warfareplugins records in CISA KEV
TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability Priority HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Social Warfare 5 records HIGH Social Warfare Pro 1 record HIGH

Records

5 records in Social Warfare · all components

TI-2021-03290 CVE-2021-4434 · GHSA-6gjp-6pv7-w558

Social Warfare <= 3.5.2 - Remote Code Execution

Priority HIGH 82

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01923 Published 2024-01-17 Fixed in 3.5.3 CWE-94
TI-2023-04458 CVE-2023-4842 · GHSA-mfxr-7r69-92fv

Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00561 Published 2023-11-07 No fix listed CWE-79
TI-2023-00383 CVE-2023-0402 · GHSA-8w9m-69wv-wgjm

Social Warfare <= 4.3.0 - Missing Authorization

Priority LOW 26

The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00781 Published 2023-01-19 No fix listed CWE-862
TI-2023-00384 CVE-2023-0403 · GHSA-rg35-9p2m-64gc

Social Warfare <= 4.3.1 - Cross-Site Request Forgery

Priority LOW 25

The Social Warfare plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00381 Published 2023-01-19 No fix listed CWE-352
Open these records in search →