Korea Sns Vulnerabilities

The Korea SNS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will e...

CVSS:

6.4

Affected:

up to 1.7.0

Fix:

No patched version reported

Disclosed:

Feb 18, 2026

CVE-2026-39667 on NVD →

The Korea SNS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing or incorrect nonce validation on the 'kon_tergos_options' function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request gra...

CVSS:

4.3

Affected:

up to 1.6.4

Fixed in:

1.6.5

Disclosed:

Nov 8, 2023

CVE-2023-47670 on NVD →