WordPress Plugin Vulnerabilities

Floating Social Media Links <= 1.4.2 - fsml-hideshow.js.php wpp Parameter Remote File Inclusion

Description

The Floating Social Media Links WordPress plugin was affected by a fsml-hideshow.js.php wpp Parameter Remote File Inclusion security vulnerability.

Affects Plugins

Plugin icon
floating-social-media-links
Fixed in 1.4.3

References

Classification

Type
RFI
OWASP top 10
A1: Injection
CWE
CWE-98

Miscellaneous

Verified
No
WPVDB ID
8f5fce6b-cc78-4959-88fb-6025861445c4

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-02-17
Title
UnlimHost <= 1.2.3 - Unauthenticated Local File Inclusion
Published
2026-03-03
Title
wpDataTables (Premium) < 6.5.0.2 - Unauthenticated Local File Inclusion
Published
2025-09-02
Title
Vocal <= 1.12 - Unauthenticated Local File Inclusion
Published
2025-09-03
Title
Abstracts < 2.7.5 - Unauthenticated Local File Inclusion
Published
2024-08-16
Title
Void Elementor Post Grid Addon for Elementor Page builder < 2.4 - Authenticated (Contributor+) Local File Inclusion