WordPress Plugin Vulnerabilities

Social Media Widget < 4.0.2 - Malicious Code

Description

The Social Media Widget WordPress plugin was affected by a Malicious Code security vulnerability.

Affects Plugins

Plugin icon
social-media-widget
Fixed in 4.0.2

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&old=691839@social-media-widget/trunk&new=693941@social-media-widget/trunk
URL
http://slashdot.org/submission/2592777/top-wordpress-widget-sold-off-turned-into-seo-spambot

Miscellaneous

Verified
No
WPVDB ID
13216c80-75a5-44a7-abe7-ba681ffac804

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-01-07 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
AntiVirus 1.0 - PHP Backdoor Detection Bypass
Published
2024-11-14
Title
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass
Published
2014-08-01
Title
Flash Player Widget - dewplayer.swf Content Spoofing
Published
2014-08-01
Title
Thinkun Remind 1.1.3 - exportData.php dirPath Parameter Traversal Arbitrary File Access
Published
2024-03-26
Title
WP Reset < 2.0 - Sensitive Information Exposure due to Insufficient Randomness