Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-0840 - Easy Social Icons Plugin
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed.
PLUGIN
Easy Social Icons
CVE-2022-0840
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-0887 - Easy Social Icons Plugin
The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.
PLUGIN
Easy Social Icons
CVE-2022-0887
Risk Score