CyberSecBulletin

WarfarePlugins vulnerabilities

We track 1 vulnerability in WarfarePlugins products across 2 products. None are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on March 24, 2019.

1vulnerabilities
0critical
0high
1exploited
6.1average CVSS score

Latest WarfarePlugins vulnerabilities

  • 6.1 Medium severity

    WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Exploited

    CVE-2019-9978WarfarePluginsEPSS 72.9%

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.