CVE-2021-36890

概要

参考情報

• patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-2-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/social-share-buttons-by-supsystic · Product

social share buttons のその他の脆弱性

• CVE-2024-47330高 8.8Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider …
• CVE-2022-33960高 8.8Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= …
• CVE-2022-27235高 8.8Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
• CVE-2022-1653中 4.3The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, all…