Vulnerabilities > Ultimatelysocial > Social Media Share Buttons Social Sharing Icons > 2.8.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-20 | CVE-2023-5070 | Information Exposure vulnerability in Ultimatelysocial Social Media Share Buttons & Social Sharing Icons The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. | 6.5 |
| 2023-10-20 | CVE-2023-5602 | Cross-Site Request Forgery (CSRF) vulnerability in Ultimatelysocial Social Media Share Buttons & Social Sharing Icons The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. | 8.8 |
| 2023-07-28 | CVE-2023-3977 | Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. | 4.3 |