WordPress Plugin Vulnerabilities

Really simple Facebook Twitter share buttons 2.10.4 - Settings Page Manipulation CSRF

Description

The really-simple-facebook-twitter-share-buttons WordPress plugin was affected by a Settings Page Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
really-simple-facebook-twitter-share-buttons
Fixed in 2.10.5

References

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
2d07948b-fe29-45a6-acf5-ff388d425f88

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-03-03
Title
Resize at Upload Plus <= 1.3 - Cross-Site Request Forgery (CSRF)
Published
2023-02-07
Title
OWM Weather < 5.6.12 - Post Duplication via CSRF
Published
2023-09-27
Title
Block Update < 3.3.2 - Arbitrary Plugin Update Blocking via CSRF
Published
2025-04-01
Title
CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery
Published
2026-03-20
Title
Neos Connector for Fakturama <= 0.0.14 - Cross-Site Request Forgery to Settings Update