Vulnerabilities

TI-2024-03814 CVE-2024-4094 · GHSA-qrw5-2xvc-ff3x

Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

MEDIUM 58

The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unf…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00399 Published 2024-06-18 Fixed in 8.5.1 CWE-79

TI-2014-03881 CVE-2014-4717 · GHSA-cf83-77fm-2rj8

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons…

LOW 35

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02805 Published 2014-07-03 No fix listed CWE-352

Vulnerabilities

Filters

Simple Share Buttons Adder < 8.5.1 - Admin+ Stored XSS

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons…