Extension WordPress
Vulnérabilités Social Media Share Buttons & Social Sharing Icons
Cette page rassemble les failles publiées pour Social Media Share Buttons & Social Sharing Icons, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Social Media Share Buttons & Social Sharing Icons
14 fiches
Social Media Share Buttons & Social Sharing Icons <= 2.9.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping. This…
*-2.9.0
2.9.1
31/10/2024
Social Media & Share Icons <= 2.9.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Social Media & Share Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-2.9.1
2.9.2
06/07/2024
Social Media Share Buttons <= 2.8.8 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.8.8 due to insufficient input sanitization and output escaping. This…
*-2.8.8
2.8.9
27/03/2024
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 – Information Exposure
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that…
*-2.8.5
2.8.6
16/10/2023
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 – Cross-Site Request Forgery
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validation on several functions…
*-2.8.5
2.8.6
16/10/2023
Social Media & Share Icons <= 2.8.3 – Reflected Cross-Site Scripting
The Social Media & Share Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.8.3
2.8.4
29/08/2023
Inisev Plugins (Various Versions) – Missing Authorization on handle_installation function
Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible…
*-2.8.1
2.8.2
27/07/2023
Inisev Plugins (Various Versions) – Cross-Site Request Forgery on handle_installation function
Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions.…
*-2.8.1
2.8.2
27/07/2023
Social Media Share Buttons & Social Sharing Icons <= 2.8.1 – Authenticated(Administrator+) Stored Cross-Site Scripting
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping. This makes…
*-2.8.1
2.8.2
05/06/2023
Social Media & Share Icons <= 2.8.1 – Missing Authorization via handle_installation
The Social Media & Share Icons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_installation function in versions up to, and including, 2.8.1. This makes it possible for…
*-2.8.1
2.8.2
02/06/2023
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 – Reflected Cross-Site Scripting
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wp_ajax_getForm AJAX action in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping.…
*-2.1.7
2.1.9
27/03/2019
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 – Arbitrary Options Deletion
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Arbitrary Options Deletion in versions up to, and including, 1.5.1. This is due to missing capability checks on the sfsi_DeleteSkin() function that deletes…
*-1.5.1
1.5.2
28/06/2016
Social Media Share Buttons & Social Sharing Icons <= 1.2.1 – Unspecified Vulnerabilities
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress patched unspecified vulnerabilities in version 1.2.2.
*-1.2.1
1.2.2
20/07/2015
Social Media Share Buttons & Social Sharing Icons < 1.1.1.12 – Authenticated Stored Cross-Site Scripting
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions before 1.1.1.12 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.1.1.11
1.1.1.12
30/05/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.