Extension WordPress
Vulnérabilités MashShare – Social Media Share Buttons, Social Share Icons
Cette page rassemble les failles publiées pour MashShare – Social Media Share Buttons, Social Share Icons, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MashShare – Social Media Share Buttons, Social Share Icons
5 fiches
Social Media Share Buttons | MashShare <= 4.0.47 – Missing Authorization
The MashShare – Social Media Share Buttons, Social Share Icons plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.0.47. This makes it…
*-4.0.47
Non indiqué
03/01/2025
Social Media Share Buttons <= 3.8.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The Social Media Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode in versions up to, and including, 3.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-3.8.6
3.8.7
23/12/2022
Social Media Share Buttons <= 3.8.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Social Media Share Buttons plugin for WordPress is vulnerable to stored cross-site scripting in versions up to, and including, 3.8.3, due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level…
*-3.8.3
3.8.4
19/08/2022
Social Media Share Buttons <= 3.8.1 – Authenticated (Admin+) Stored Cross-Site Scripting
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin
*-3.8.1
3.8.2
16/06/2022
Social Media Share Buttons | MashShare < 2.3.1 – Information Disclosure
The Social Media Share Buttons | MashShare plugin for WordPress is vulnerable to Information Disclosure in versions before 2.3.1 via the mashsb_process_actions function. This can allow unauthenticated attackers to extract sensitive data including configuration information.
[*, 2.3.1)
2.3.1
25/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.