warfareplugins

Records9All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

warfareplugins records in CISA KEV

TI-2019-07343 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Social Warfare 5 records HIGH Social Warfare Pro 1 record HIGH

Records

1 record in Social Warfare Pro · all components

TI-2019-07343 CVE-2019-9978 · GHSA-gfx2-wv94-38hv

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the…

HIGH 84KEV

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.72946 Published 2019-03-24 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	7
Low	0
No CVSS	0