Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-05-08
CVE-2024-2836 - Social Login And Social Comments Plugin
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
PLUGIN
Social Login And Social Comments
CVE-2024-2836
Risk Score
Threat Entry
Updated 2024-12-12
CVE-2023-2779 - Social Login And Social Comments Plugin
The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
PLUGIN
Social Login And Social Comments
CVE-2023-2779
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2021-24987 - Social Login And Social Comments Plugin
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its the_champ_sharing_count AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue.
PLUGIN
Social Login And Social Comments
CVE-2021-24987
Risk Score