plugin

Wp Social Invitations Vulnerabilities

1 known security issue reported for the Wp Social Invitations WordPress plugin. Most recent disclosed May 28, 2014.

1 medium

Running Wp Social Invitations on your site? Check whether your installed version is affected.

Scan your site free

WordPress Social Invitations – Lite <= 1.4.4.2 - Reflected Cross-Site Scripting

medium

Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter.

CVSS:
6.1
Affected:
up to 1.4.4.2
Fixed in:
1.4.4.3
Disclosed:
May 28, 2014

CVE-2014-4597 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database