Vulnerability · Published Jul 22, 2022 · Assigned by Patchstack
CVE-2022-33960WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
High 8.5
In plain English
A high-severity SQL injection in Social Share Buttons by Supsystic (WordPress plugin) from Supsystic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)8.5High
Exploit odds (30 days)1.0%top 38.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Supsystic | Social Share Buttons by Supsystic (WordPress plugin) | <= 2.2.3 – through 2.2.3 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
References
- https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers x_refsource_CONFIRM
- https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-authenticated-sql-injection-sqli-vulnerabilities x_refsource_CONFIRM