Wpsocialrocket Social_rocket
4 CVEs affecting Wpsocialrocket Social_rocket. Latest disclosed: 2025-01-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37258 | High | 7.1 | 2024-07-22 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Social Rocket allows Reflected XSS.This issue affe… |
CVE-2024-9702 | Medium | 6.4 | 2025-01-07 | The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode… |
CVE-2024-9697 | Medium | 5.3 | 2025-01-07 | The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the twee… |
CVE-2022-3136 | Medium | 4.8 | 2022-10-10 | The Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |