plugin

Share And Follow Vulnerabilities

1 known security issue reported for the Share And Follow WordPress plugin. Most recent disclosed May 21, 2012.

1 high

Running Share And Follow on your site? Check whether your installed version is affected.

Share and Follow <= 1.80.3 - Cross-Site Scripting

high

Cross-site scripting (XSS) vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key (cnd-key) in a share-and-follow-menu page to wp-admin/admin.php.

CVSS:: 7.2
Affected:: up to 1.80.3
Fixed in:: 1.80.4
Disclosed:: May 21, 2012

CVE-2012-2917 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database