CVE-2015-9433

MEDIUM 6.5CVE-2015-9433 · Published 26/09/2019 · updated 17/06/2026

In short

CVE-2015-9433 is a MEDIUM (CVSS 6.5) vulnerability affecting wp social bookmarking light (wp social bookmarking light project).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.7% of all vulnerabilities.
Fix: update to 1.7.10 or later.

Package	Affected versions	Patched versions
wp social bookmarking light wp_social_bookmarking_light_project	`< 1.7.10`	`1.7.10`

Description

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.

References

cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html · Exploit
wordpress.org/plugins/wp-social-bookmarking-light · Product
wpvulndb.com/vulnerabilities/8252 · Exploit

More vulnerabilities in wp social bookmarking light

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free