Warfareplugins Social Warfare vulnerabilities

• blazeretail blaze retail widget, pedrogusmao02 wrapper link elementor, stuartobrien simply show hooks +3 more +5 more Several WordPress.org Plugins <= Various Versions - Injected Backdoor CVE-2024-6297 Public exploit 10.0 CriticalJune 25, 2024
• warfareplugins social warfare, social sharing plugin – social warfare +1 more Social Warfare <= 3.5.2 - Remote Code Execution CVE-2021-4434 10.0 CriticalJanuary 17, 2024
• warfareplugins social warfare, social sharing plugin – social warfare +1 more Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4842 Public exploit 6.4 MediumNovember 7, 2023
• warfareplugins social warfare, social sharing plugin – social warfare +1 more Social Warfare <= 4.3.1 - Cross-Site Request Forgery CVE-2023-0403 5.4 MediumJanuary 19, 2023
• warfareplugins social warfare, social sharing plugin – social warfare +1 more Social Warfare <= 4.3.0 - Missing Authorization CVE-2023-0402 5.4 MediumJanuary 19, 2023
• warfareplugins social warfare, social warfare pro, wordpress social warfare plugin +2 more The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post... CVE-2019-9978 In KEVPublic exploit EPSS 72.9% 6.1 MediumMarch 24, 2019