Vulnerabilities > Sumo > High

DATE CVE VULNERABILITY TITLE RISK
2023-10-06 CVE-2023-25033 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost 4.4
Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.
network
low complexity
sumo CWE-352
8.8
2023-01-23 CVE-2022-3425 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
network
low complexity
sumo
7.2
2023-01-23 CVE-2022-4323 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
network
low complexity
sumo
7.2
2017-09-07 CVE-2015-4697 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Google Analyticator
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
network
low complexity
sumo CWE-352
8.8