GCVE - cpe:2.3:a:warfareplugins:social_warfare

Approved changes feed: RSS · Atom

cpe:2.3:a:warfareplugins:social_warfare_pro:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Warfareplugins (`d41f23b7-7f39-5546-bbf6-59d76a59ce23`)
Product	Social Warfare Pro (`91916830-3b57-5fd6-946c-9e9267de94a0`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-9978`	vulnerable	2026-06-08 05:14:26.747826	Details available The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro. Published: 2019-03-24T14:47:26.000Z Updated: 2025-10-21T23:45:41.750Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/9238 https://www.cybersecurity-help.cz/vdb/SB2019032105 https://blog.sucuri.net/2019/03/zero-day-stored-xss-in-social-warfare.html https://www.wordfence.com/blog/2019/03/unpatched-zero-day-vulnerability-in-social-warfare-plugin-exploited-in-the-wild/ https://www.pluginvulnerabilities.com/2019/03/21/full-disclosure-of-settings-change-persistent-cross-site-scripting-xss-vulnerability-in-social-warfare/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.