Vulnerabilities > Sumo
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-06 | CVE-2023-25033 | Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost 4.4 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions. | 8.8 |
| 2023-09-01 | CVE-2023-25044 | Cross-site Scripting vulnerability in Sumo Social Share Boost 4.4 Auth. | 4.8 |
| 2023-05-15 | CVE-2023-23688 | Cross-site Scripting vulnerability in Sumo Social Share Boost Auth. | 5.4 |
| 2023-01-23 | CVE-2022-3425 | Unspecified vulnerability in Sumo Google Analyticator The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. | 7.2 |
| 2023-01-23 | CVE-2022-4323 | Unspecified vulnerability in Sumo Google Analyticator The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present | 7.2 |
| 2019-08-22 | CVE-2009-5158 | Improper Input Validation vulnerability in Sumo Google Analyticator The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text. | 6.1 |
| 2017-09-07 | CVE-2015-4697 | Cross-Site Request Forgery (CSRF) vulnerability in Sumo Google Analyticator Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563. | 8.8 |