Approved changes feed: RSS · Atom

cpe:2.3:a:sharethis:simple_share_buttons_adder:3.6:*:*:*:*:wordpress:*:*

part: a version: 3.6 update: *

VendorSharethis (f3a47556-248d-5042-8d30-5ba1e59c7225)
ProductSimple Share Buttons Adder (efa15320-cfb3-5224-a86f-24d17a2d8e87)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/davidsneal/simplesharebuttons purl2cpe 2026-06-01 10:15:11.877206
pkg:github/wp-plugins/simple-share-buttons-adder purl2cpe 2026-06-01 10:15:11.877208
pkg:github/wpplugins/simple-share-buttons-adder purl2cpe 2026-06-01 10:15:11.877209

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4717 vulnerable 2026-06-08 05:05:45.571086 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) ssba_share_text parameter in a save action to wp-admin/options-general.php, which is not properly handled in the homepage, and unspecified vectors related to (2) Pages, (3) Posts, (4) Category/Archive pages or (5) post Excerpts.
Published: 2014-07-03T14:00:00.000Z
Updated: 2024-09-16T22:30:44.980Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.