Facebook Button Plugin Vulnerabilities

[en] The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag

Affected:

up to 2.74

Fixed in:

2.74

Disclosed:

Dec 26, 2023

CVE-2023-6250 on NVD →

The BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.73 via a meta tag. This makes it possible for unauthenticated attackers to view the content of password protect...

CVSS:

5.3

Affected:

up to 2.73

Fixed in:

2.74

Disclosed:

Nov 29, 2023

CVE-2023-6250 on NVD →

[en] Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2,...

Affected:

up to 2.54

Fixed in:

2.54

Disclosed:

May 22, 2017

CVE-2017-2171 on NVD →

The "BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress" plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘category’ parameter in versions before 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

CVSS:

6.1

Affected:

up to 2.5.4

Fixed in:

2.5.4

Disclosed:

Apr 12, 2017

The "BestWebSoft's Like & Share – Posts, Pages and Widget Social Extension plugin for WordPress" plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘category’ parameter in versions before 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

Affected:

up to 2.5.4

Fixed in:

2.5.4

Disclosed:

Apr 12, 2017

Affected:

up to 2.54

Fixed in:

2.54