CVE-2021-4434: Social Warfare <= 3.5.2 - Remote Code Execution
Published Jan 17, 2024
·Updated
The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swpurl' parameter. This allows attackers to execute code on the server.
Affected Software
1 affected component
Warfareplugins Social Warfare Wordpress<3.5.3
Event History
Jan 17, 2024
CVE Published
via MITRE·08:31 AM
Data Sourced
via MITRE·08:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-4434?
The severity of CVE-2021-4434 is critical as it allows for Remote Code Execution on affected servers.
2
How do I fix CVE-2021-4434?
To fix CVE-2021-4434, update the Social Warfare plugin to version 3.5.3 or later.
3
Who is affected by CVE-2021-4434?
CVE-2021-4434 affects users of the Social Warfare plugin for WordPress in versions up to and including 3.5.2.
4
What could happen if CVE-2021-4434 is exploited?
If CVE-2021-4434 is exploited, attackers can execute arbitrary code on the affected WordPress server.
5
When was CVE-2021-4434 discovered?
CVE-2021-4434 was publicly disclosed in 2021.