Most severe vulnerabilities for vendor "social web suite"

Where

Sort:

Software

social web suite social web suite wordpress plugin

Social Web Suite Social Web Suite WordPress pluginSocial Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret

Risk 49

Severity

8.6

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it in an SQL statement, allowing unauthenticated users to perform SQL injection attacks.

First published (updated )

CVE-2026-88930

Social Web Suite Social Web Suite WordPress pluginSocial Web Suite <= 4.1.12 - Unauthenticated Arbitrary Plugin Settings Update

Risk 27

Severity

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite arbitrary Social Web Suite WordPress plugin through 4.1.12 options, including the shared secret that guards its own privileged endpoints.

First published (updated )

CVE-2026-88931

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending