WWarfarePlugins

Products

Exploited and recent CVEs

• CVE-2025-26973 Medium 6.5 WordPress Social Warfare Plugin <= 4.5.5 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-6297 Critical 10.0 Several WordPress.org Plugins <= Various Versions - Injected Backdoor 1.0%
• CVE-2024-1959 Medium 6.4 Social Sharing Plugin – Social Warfare <= 4.4.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
• CVE-2021-4434 Critical 10.0 Social Warfare <= 3.5.2 - Remote Code Execution 1.9%
• CVE-2023-4842 Medium 6.4 Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%
• CVE-2023-0403 Medium 5.4 Social Warfare <= 4.3.1 - Cross-Site Request Forgery 0.4%
• CVE-2023-0402 Medium 5.4 Social Warfare <= 4.3.0 - Missing Authorization 0.8%