Vulnerabilities > Addthis

DATE CVE VULNERABILITY TITLE RISK
2019-09-26 CVE-2015-9439 Cross-site Scripting vulnerability in Addthis
The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthis_social_widget pubid parameter.
network
low complexity
addthis CWE-79
4.8