6.5Media

CVE-2024-13117Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path Traversal

Social Share Buttons for WordPress Publicada: 2025-01-27 09:00 (hace 1 año)

Descripción

The Social Share Buttons for WordPress plugin through 2.7 allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded

Debilidad (CWE): CWE-22

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
artlosk	share buttons	≤ 2.7
—	Social Share Buttons for WordPress	≤ 2.7

Referencias y parches

https://wpscan.com/vulnerability/3234cdac-f328-4f1e-a1de-31fbd86aefb9/ exploitvdb-entrytechnical-descriptionExploit

Coincidencias CPE (NVD) (1)

cpe:2.3:a:artlosk:share_buttons:*:*:*:*:*:wordpress:*:* ≤ 2.7

Puntuación CVSS

6.5Media

Fuente: CISA-ADP · CVSS 3.1

Vector de ataque: Red
Complejidad: Baja
Privilegios: Ninguno
Interacción del usuario: Ninguna
Alcance: Sin cambio
Confidencialidad: Bajo
Integridad: Bajo
Disponibilidad: Ninguno

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Todas las puntuaciones (2)

CISA-ADP	CVSS 3.1	6.5Media
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	6.5Media

EPSS (probabilidad de explotación en 30 días)

0.50%

superior al 43 % de todas las CVE

Evaluación de CISA (SSVC)

Explotación: poc
Automatizable: yes
Impacto técnico: partial

Cronología

ID reservado2025-01-01
Publicada2025-01-27 09:00
Llegó a IP-DB2026-10-24 23:54
Última actualización2026-06-17 10:01

Asignada por (CNA): WPScan
Estado en NVD: Analyzed

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — WordPress plugins & themes

8.8Alta

CVE-2026-13764 hace 4 horas

Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

StylemixThemes Masterstudy - Education WordPress Theme

The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJ…

8.8Alta

CVE-2026-16135 hace 4 horas

VibeBP <= 1.9.9.8.1 - Authenticated (Subscriber+) Privilege Escalation in set_email_notification_settings()

VibeThemes VibeBP

The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the set_email_notification_settings() function. This makes it possibl…

8.8Alta

CVE-2026-15309 hace 4 horas

CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint

WishList Member CourseCure Courses

The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update…

5.4Media

CVE-2026-2982 hace 4 horas

WP Table Builder – Drag & Drop Table Builder <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'

wptb WP Table Builder – Drag & Drop Table Builder

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' parameter in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possib…

8.8Alta

CVE-2026-125836 hace 8 horas

WordPress Simple JWT Login plugin <= 3.6.8 - Cross Site Request Forgery (CSRF) vulnerability

Nicu Micle Simple JWT Login

Cross-Site Request Forgery (CSRF) vulnerability in Nicu Micle Simple JWT Login simple-jwt-login allows Cross Site Request Forgery.This issue affects Simple JWT Login: from n/a through 3.6.8.

5.3Media

CVE-2026-124817 hace 9 horas

Clockinator Lite < 1.1.0 - Unauthenticated Leave Record Modification

Clockinator Lite

The Clockinator Lite WordPress plugin before 1.1.0 does not check authorisation or ownership when updating leave requests, allowing unauthenticated users to modify any leave record, including approving or rejecting requests and reassigning them to other users.