Extension WordPress
Vulnérabilités Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic
Cette page rassemble les failles publiées pour Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic
4 fiches
Shareaholic <= 9.7.11 – Missing Authorization via accept_terms_of_service
The Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'accept_terms_of_service' function in all versions up to, and including,…
*-9.7.11
9.7.12
31/01/2024
Shareaholic <= 9.7.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Shareaholic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shareaholic' shortcode in versions up to, and including, 9.7.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for…
*-9.7.8
9.7.9
14/11/2023
Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic <= 9.7.5 – Information Disclosure
The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing…
*-9.7.5
9.7.6
04/07/2022
WordPress Social Sharing, Related Posts & Analytics – Shareaholic < 7.6.1.0 – Authenticated (Subscriber+) Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the location[id] parameter in a shareaholic_add_location action to wp-admin/admin-ajax.php.
[*, 7.6.1.0)
7.6.1.0
07/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.