Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: warfareplugins Component: Social Warfare Clear all filters
TI-2021-03290 CVE-2021-4434 · GHSA-6gjp-6pv7-w558

Social Warfare <= 3.5.2 - Remote Code Execution

Priority HIGH 82

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01923 Published 2024-01-17 Fixed in 3.5.3 CWE-94
TI-2023-04458 CVE-2023-4842 · GHSA-mfxr-7r69-92fv

Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00653 Published 2023-11-07 No fix listed CWE-79
TI-2023-00384 CVE-2023-0403 · GHSA-rg35-9p2m-64gc

Social Warfare <= 4.3.1 - Cross-Site Request Forgery

Priority LOW 25

The Social Warfare plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00381 Published 2023-01-19 No fix listed CWE-352
TI-2023-00383 CVE-2023-0402 · GHSA-8w9m-69wv-wgjm

Social Warfare <= 4.3.0 - Missing Authorization

Priority LOW 26

The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00781 Published 2023-01-19 No fix listed CWE-862