Approved changes feed: RSS · Atom

cpe:2.3:a:wpdevart:social_comments:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpdevart (62458400-5314-5c71-819c-4b29c90460da)
ProductSocial Comments (ff050ce2-1ed8-5c24-b125-f2a431b741a6)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0876 vulnerable 2026-06-03 14:45:57.318549 Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting
The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2022-04-25T15:51:11.000Z
Updated: 2024-08-02T23:40:04.574Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.