Vulnerabilities

TI-2023-06283 CVE-2023-6878 · GHSA-5fjw-4jww-5859

Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update

LOW 39

The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dcssb_ajax_update' function in versions up to, and including, 2.4.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00487 Published 2024-01-11 No fix listed CWE-285

TI-2023-05033 CVE-2023-5468 · GHSA-5j4m-cf9v-85pv

Slick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The Slick Contact Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcscf-link' shortcode in versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping on u…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00394 Published 2023-10-10 No fix listed CWE-79

Vulnerabilities

Filters

Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update

Slick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode