Reputeinfosystems Social Share And Social Locker vulnerabilities

3 vulnerabilities

Known vulnerabilities in Reputeinfosystems Social Share And Social Locker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1HighCVE-2025-31902reputeinfosystems · social_share_and_social_locker +1 moreWordPress Social Share And Social Locker Plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Reflected XSS.This issue affects Social Share And Social Locker: from n/a through <= 1.4.1.EPSS0.24%9.3CriticalCVE-2025-31911reputeinfosystems · social_share_and_social_locker +1 moreWordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Blind SQL Injection.This issue affects Social Share And Social Locker: from n/a through <= 1.4.2.EPSS0.38%4.8MediumCVE-2024-11189reputeinfosystems · social_share_and_social_locker +2 moreSocial Share And Social Locker – ARSocial < 1.4.2 - Admin+ Stored XSSThe Social Share And Social Locker WordPress plugin before 1.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).EPSS0.33%