Vulnerabilities > Ultimatelysocial

DATE CVE VULNERABILITY TITLE RISK
2023-10-20 CVE-2023-5070 Information Exposure vulnerability in Ultimatelysocial Social Media Share Buttons & Social Sharing Icons
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function.
network
low complexity
ultimatelysocial CWE-200
6.5
6.5
2023-10-20 CVE-2023-5602 Cross-Site Request Forgery (CSRF) vulnerability in Ultimatelysocial Social Media Share Buttons & Social Sharing Icons
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5.
network
low complexity
ultimatelysocial CWE-352
8.8
8.8
2023-09-27 CVE-2023-41238 Cross-site Scripting vulnerability in Ultimatelysocial Social Media Share Buttons & Social Sharing Icons
Unauth.
network
low complexity
ultimatelysocial CWE-79
6.1
6.1
2023-07-28 CVE-2023-0958 Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. 6.5
6.5
2023-07-28 CVE-2023-3977 Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. 4.3
4.3
2023-06-27 CVE-2023-1166 Unspecified vulnerability in Ultimatelysocial USM Premium
The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
network
low complexity
ultimatelysocial
4.8
4.8