Vulnerabilities > Sumo

DATE CVE VULNERABILITY TITLE RISK
2023-10-06 CVE-2023-25033 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost
Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.
network
low complexity
sumo CWE-352
8.8
2023-09-01 CVE-2023-25044 Cross-site Scripting vulnerability in Sumo Social Share Boost
Auth.
network
low complexity
sumo CWE-79
4.8
2023-05-15 CVE-2023-23688 Cross-site Scripting vulnerability in Sumo Social Share Boost
Auth.
network
low complexity
sumo CWE-79
5.4
2023-01-23 CVE-2022-3425 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
network
low complexity
sumo
7.2
2023-01-23 CVE-2022-4323 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
network
low complexity
sumo
7.2
2019-08-22 CVE-2009-5158 Improper Input Validation vulnerability in Sumo Google Analyticator
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.
network
sumo CWE-20
4.3
2017-09-07 CVE-2015-4697 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Google Analyticator
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
network
sumo CWE-352
6.8