CVE-2022-33960

HIGH

Supsystic plugin <= 2.2.3 - SQL Injection

Title source: llm

Description

Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_confirm

https://wordpress.org/plugins/social-share-buttons-by-supsystic/#developers

Patch, Third Party Advisory x_refsource_confirm

https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-3-multiple-authenticated-sql-injection-sqli-vulnerabilities

Scores

CVSS v3 8.5

EPSS 0.0076

EPSS Percentile 51.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (2)

Supsystic/Social Share Buttons by Supsystic (WordPress plugin) <= 2.2.3 - 2.2.3

supsystic/social_share_buttons < 2.2.4

Published Jul 22, 2022

Tracked Since Feb 18, 2026