Lucene search
HistoryJul 22, 2022 - 5:15 p.m.
CVE-2022-27235
access control
vulnerabilities
social share buttons
supsystic
wordpress
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
40.8%
Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
Affected configurations
Node
supsysticsocial_share_buttonsRange<2.2.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| supsystic | social_share_buttons | * | cpe:2.3:a:supsystic:social_share_buttons:*:*:*:*:*:wordpress:*:* |
Related
patchstack
patchstack
prion
prion
Improper access control
2022-07-22 17:15:00
cve
cve
CVE-2022-27235
2022-07-22 17:15:08
cnvd
cnvd
WordPress Social Share Buttons Access Control Error Vulnerability
2022-07-26 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
Social Share Buttons by Supsystic < 2.2.4 - Subscriber+ Unauthorised Actions
2022-06-09 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
40.8%
Related for NVD:CVE-2022-27235