Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2019-9978
HistoryMar 24, 2019 - 3:29 p.m.

CVE-2019-9978

2019-03-2415:29:00
CWE-79
mitre
web.nvd.nist.gov
1046
In Wild
3
cve-2019-9978
social-warfare
wordpress
xss
nvd
security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6

Confidence

High

EPSS

0.966

Percentile

99.7%

JSON

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.

Affected configurations

Nvd
Node
warfarepluginssocial_warfareRange<3.5.3wordpress
OR
warfarepluginssocial_warfare_proRange<3.5.3wordpress
VendorProductVersionCPE
warfarepluginssocial_warfare*cpe:2.3:a:warfareplugins:social_warfare:*:*:*:*:*:wordpress:*:*
warfarepluginssocial_warfare_pro*cpe:2.3:a:warfareplugins:social_warfare_pro:*:*:*:*:*:wordpress:*:*

Social References

More

Related

thn 1
osv 1
wpvulndb 1
zdt 2
cisa_kev 1
githubexploit 2
dsquare 1
packetstorm 2
threatpost 1
exploitpack 1
prion 1
cvelist 1
nessus 1
nuclei 1
nvd 1
exploitdb 1
openvas 1
checkpoint_advisories 1
attackerkb 1
qualysblog 1
thn
thn
Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
2019-04-23 18:04:00
osv
osv
CVE-2019-9978
2019-03-24 15:29:00
wpvulndb
wpvulndb
Social Warfare <= 3.5.2 - Unauthenticated Arbitrary Settings Update
2019-03-21 00:00:00
zdt
zdt
Wordpress Social Warfare Plugin 3.5.3 - Remote Code Execution Exploit
2019-05-03 00:00:00
WordPress Social Warfare 3.5.2 Remote Code Execution Exploit
2021-07-27 00:00:00
cisa_kev
cisa_kev
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
2021-11-03 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Warfareplugins Social Warfare
2019-05-06 20:11:20
Exploit for Cross-site Scripting in Warfareplugins Social Warfare
2019-05-03 05:57:44
dsquare
dsquare
WordPress Social Warfare 3.5.2 RCE
2019-04-15 00:00:00
packetstorm
packetstorm
WordPress Social Warfare 3.5.2 Remote Code Execution
2021-07-27 00:00:00
Wordpress Social Warfare Remote Code Execution
2019-05-03 00:00:00
threatpost
threatpost
Exploits for Social Warfare WordPress Plugin Reach Critical Mass
2019-04-23 17:30:31
exploitpack
exploitpack
Wordpress Plugin Social Warfare 3.5.3 - Remote Code Execution
2019-05-03 00:00:00
prion
prion
Design/Logic Flaw
2019-03-24 15:29:00
cvelist
cvelist
CVE-2019-9978
2019-03-24 14:47:26
nessus
nessus
WordPress Plugin 'Social Warfare' < 3.5.3 XSS
2022-04-07 00:00:00
nuclei
nuclei
WordPress Social Warfare <3.5.3 - Cross-Site Scripting
2020-08-12 15:05:52
nvd
nvd
CVE-2019-9978
2019-03-24 15:29:00
exploitdb
exploitdb
WordPress Plugin Social Warfare &lt; 3.5.3 - Remote Code Execution
2019-05-03 00:00:00
openvas
openvas
WordPress Social Warfare Plugin < 3.5.3 XSS Vulnerability
2019-03-28 00:00:00
checkpoint_advisories
checkpoint_advisories
WordPress Social-Warfare Plugin Cross-Site Scripting (CVE-2019-9978)
2019-04-18 00:00:00
attackerkb
attackerkb
CVE-2019-9978
2019-03-24 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6

Confidence

High

EPSS

0.966

Percentile

99.7%

JSON
Related for CVE-2019-9978
thn1osv1wpvulndb1zdt2cisa_kev1githubexploit2dsquare1packetstorm2threatpost1exploitpack1prion1cvelist1nessus1nuclei1nvd1exploitdb1openvas1checkpoint_advisories1attackerkb1qualysblog1