Vulnerabilities

TI-2022-01496 CVE-2022-1626 · GHSA-h48q-wcpv-wfhq

Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF

LOW 24

The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00304 Published 2022-07-11 No fix listed CWE-352

TI-2012-05421 CVE-2012-6719 · GHSA-q3vm-6mjh-wcwm

The sharebar plugin before 1.2.2 for WordPress has SQL injection.

MEDIUM 46

The sharebar plugin before 1.2.2 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01815 Published 2019-08-28 No fix listed CWE-89

TI-2012-05420 CVE-2012-6718 · GHSA-rj82-f526-3xpj

The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.

LOW 29

The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00927 Published 2019-08-28 No fix listed CWE-79

Vulnerabilities

Filters

Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRF

The sharebar plugin before 1.2.2 for WordPress has SQL injection.

The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.