Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Supsystic Component: Social Share Buttons Clear all filters
TI-2024-31648 CVE-2024-47330 · GHSA-833q-6rf3-p3gr

Broken Access Control vulnerability on multiple WordPress plugins by Supsystic

Priority LOW 38

Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00346 Published 2024-09-26 No fix listed CWE-862
TI-2022-14956 CVE-2022-33960 · GHSA-f55m-jv7g-wxvq

SQL injection in Supsystic Social Share Buttons by Supsystic

Priority MEDIUM 40

Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00966 Published 2022-07-22 No fix listed CWE-89
TI-2022-01523 CVE-2022-1653 · GHSA-963p-r75x-r5f8

Social Share Buttons by Supsystic < 2.2.4 - Multiple CSRF

Priority LOW 20

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00429 Published 2022-06-27 Fixed in 2.2.4 CWE-352