CVE-2022-1653

MEDIUM

Social Share Buttons by Supsystic < 2.2.4 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin settings, as well as create, delete and rename projects and networks.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48

Scores

CVSS v3 4.3
EPSS 0.0041
EPSS Percentile 33.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE
CWE-352
Status published
Products (1)
supsystic/social_share_buttons < 2.2.4
Published Jun 27, 2022
Tracked Since Feb 18, 2026