WordPress Plugin Vulnerabilities

Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection

Description

The Social Media Widget WordPress plugin was affected by a social-widget.php MITM Weakness Arbitrary Code Injection security vulnerability.

Affects Plugins

Plugin icon
social-media-widget
Fixed in 4.0.1

References

CVE
CVE-2013-1949
URL
https://seclists.org/oss-sec/2013/q2/10

Miscellaneous

Verified
No
WPVDB ID
51d1dcb5-c3ea-4bf5-96d2-067c51f39d87

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2017-05-03
Title
WordPress 2.3-4.8.3 - Host Header Injection in Password Reset
Published
2014-08-01
Title
Zingiri Web Shop 2.6.4 - mform.php Unspecified Issue
Published
2023-09-25
Title
Staff / Employee Business Directory for Active Directory < 1.3 - Admin LDAP Credentials Retrieval
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Published
2018-09-28
Title
Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API