plugin
6 known security issues reported for the Bp Activity Social Share WordPress plugin. Most recent disclosed Nov 12, 2023.
Running Bp Activity Social Share on your site? Check whether your installed version is affected.
Scan your site free[en] Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions.
The Wbcom Designs – BuddyPress Activity Social Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.0. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to modify social icons action gra...
Several WordPress plugins by Wbcom Designs were vulnerable to arbitrary plugin installation, activation and deactivation due to missing authorization checks on the wp_ajax_wbcom_manage_plugin_installation AJAX action function wbcom_do_plugin_action.
Several WordPress plugins by Wbcom Designs were vulnerable to arbitrary plugin installation, activation and deactivation due to missing authorization checks on the wp_ajax_wbcom_manage_plugin_installation AJAX action function wbcom_do_plugin_action.
Arbitrary Plugin Installation, Activation and Deactivation vulnerability discovered by Mary (JJ) Jay in WordPress Wbcom Designs – BuddyPress Activity Social Share plugin (versions < 3.2.0).
Multiple Plugins from Wbcom Designs have an AJAX action without authorisation and CSRF checks, allowing any logged in user to install, activate or deactivate a plugin on the site.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free