Plugin icon

Social Sharing Plugin – Social Warfare

social-warfare

Vulnerabilities:

9

Last Updated:

March 18, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2025-02-19
Title
Social Warfare < 4.5.6 - Contributor+ Stored XSS
Fixed in
Fixed in 4.5.6
CVSS
5.9 (medium)
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Fixed in
Fixed in 4.4.7.3
CVSS
10.0 (critical)
Published
2024-05-09
Title
Social Sharing Plugin – Social Warfare < 4.4.6 - Cross-Site Request Forgery
Fixed in
Fixed in 4.4.6
CVSS
4.3 (medium)
Published
2024-04-22
Title
Social Sharing Plugin – Social Warfare < 4.4.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.4.6.2
CVSS
6.4 (medium)
Published
2023-11-06
Title
Social Sharing Plugin - Social Warfare < 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.4.4
CVSS
6.4 (medium)
Published
2023-01-05
Title
Social Warfare < 4.4.0 - Post Meta Deletion via CSRF
Fixed in
Fixed in 4.4.0
CVSS
4.3 (medium)
Published
2023-01-05
Title
Social Warfare < 4.3.1 - Subscriber+ Post Meta Deletion
Fixed in
Fixed in 4.3.1
CVSS
4.3 (medium)
Published
2019-03-25
Title
Social Warfare <= 3.5.2 - Unauthenticated Remote Code Execution (RCE)
Fixed in
Fixed in 3.5.3
CVSS
n/a
Published
2019-03-21
Title
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
Fixed in
Fixed in 3.5.3
CVSS
6.1 (medium)