Approved changes feed: RSS · Atom

cpe:2.3:a:socialchampio:auto_post_to_social_media_from_social_champ:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSocialchampio (068ac91f-3918-5c78-8891-7f9ee9d40fd3)
ProductAuto Post To Social Media From Social Champ (c1a1a004-50d0-5183-95c6-fbffaf17087a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14846 vulnerable 2026-06-08 07:06:35.240397 SocialChamp with WordPress <= 1.3.5 - Cross-Site Request Forgery to Plugin Settings Update
MEDIUM (4.3)
The SocialChamp with WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.5. This is due to missing nonce validation on the wpsc_settings_tab_menu function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2026-01-14T06:40:07.548Z
Updated: 2026-04-08T17:19:00.415Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.