VendorsCyberNetikzeasy_social_iconsany version
Vulnerabilities

CyberNetikz Easy Social Icons for WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-0887
Easy Social Icons < 3.1.4 - Admin+ SQL Injection
Published 2022-04-04 · Modified
7.2EPSS 0.013
CVE-2015-2084
Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the image_file parameter in an edit action in the cnss_social_icon_add page to wp-admin/admin.php.
Published 2015-02-25 · Modified
6.81 PoCEPSS 0.026
CVE-2023-48336
WordPress Easy Social Icons Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-11-30 · Modified
6.5EPSS 0.004
CVE-2021-39322
Easy Social Icons <= 3.0.8 - Reflected Cross-Site Scripting
Published 2021-09-02 · Modified
6.1EPSS 0.023
CVE-2022-0840
Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
Published 2022-04-11 · Modified
4.8EPSS 0.006