Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2019-9978
HistoryNov 03, 2021 - 12:00 a.m.

WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

2021-11-0300:00:00
CISA
www.cisa.gov
5
wordpress
social warfare
xss
vulnerability
remote code execution

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.966

Percentile

99.7%

JSON

WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.

Related

githubexploit 2
dsquare 1
packetstorm 2
cve 1
thn 1
osv 1
wpvulndb 1
zdt 2
threatpost 1
exploitpack 1
prion 1
cvelist 1
nessus 1
nuclei 1
nvd 1
exploitdb 1
openvas 1
checkpoint_advisories 1
attackerkb 1
qualysblog 1
githubexploit
githubexploit
Exploit for Cross-site Scripting in Warfareplugins Social Warfare
2019-05-06 20:11:20
Exploit for Cross-site Scripting in Warfareplugins Social Warfare
2019-05-03 05:57:44
dsquare
dsquare
WordPress Social Warfare 3.5.2 RCE
2019-04-15 00:00:00
packetstorm
packetstorm
WordPress Social Warfare 3.5.2 Remote Code Execution
2021-07-27 00:00:00
Wordpress Social Warfare Remote Code Execution
2019-05-03 00:00:00
cve
cve
CVE-2019-9978
2019-03-24 15:29:00
thn
thn
Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
2019-04-23 18:04:00
osv
osv
CVE-2019-9978
2019-03-24 15:29:00
wpvulndb
wpvulndb
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
2019-03-21 00:00:00
zdt
zdt
Wordpress Social Warfare Plugin 3.5.3 - Remote Code Execution Exploit
2019-05-03 00:00:00
WordPress Social Warfare 3.5.2 Remote Code Execution Exploit
2021-07-27 00:00:00
threatpost
threatpost
Exploits for Social Warfare WordPress Plugin Reach Critical Mass
2019-04-23 17:30:31
exploitpack
exploitpack
Wordpress Plugin Social Warfare 3.5.3 - Remote Code Execution
2019-05-03 00:00:00
prion
prion
Design/Logic Flaw
2019-03-24 15:29:00
cvelist
cvelist
CVE-2019-9978
2019-03-24 14:47:26
nessus
nessus
WordPress Plugin 'Social Warfare' < 3.5.3 XSS
2022-04-07 00:00:00
nuclei
nuclei
WordPress Social Warfare <3.5.3 - Cross-Site Scripting
2020-08-12 15:05:52
nvd
nvd
CVE-2019-9978
2019-03-24 15:29:00
exploitdb
exploitdb
WordPress Plugin Social Warfare &lt; 3.5.3 - Remote Code Execution
2019-05-03 00:00:00
openvas
openvas
WordPress Social Warfare Plugin < 3.5.3 XSS Vulnerability
2019-03-28 00:00:00
checkpoint_advisories
checkpoint_advisories
WordPress Social-Warfare Plugin Cross-Site Scripting (CVE-2019-9978)
2019-04-18 00:00:00
attackerkb
attackerkb
CVE-2019-9978
2019-03-24 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.966

Percentile

99.7%

JSON
Related for CISA-KEV-CVE-2019-9978
githubexploit2dsquare1packetstorm2cve1thn1osv1wpvulndb1zdt2threatpost1exploitpack1prion1cvelist1nessus1nuclei1nvd1exploitdb1openvas1checkpoint_advisories1attackerkb1qualysblog1