Read the docs

WP Experts

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

WP Experts records in CISA KEV

No WP Experts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Protect Wp Admin 2 records MEDIUM Custom Share Buttons With Floating Sidebar 1 record LOW Wp-categories-widget 1 record LOW Wp Social Buttons 1 record LOW

Records

1 record in Wp Social Buttons · all components

TI-2022-00779 CVE-2022-0874 · GHSA-w376-4pjj-5fm9

WP Social Buttons <= 2.1 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability i…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-05-09 No fix listed CWE-79
Open these records in search →