Vulnerabilidades de Socialrocket

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Socialrocket: 2 registro(s), com severidade, exploração e correções.

Social Rocket – Social Sharing Plugin 1 Social Rocket 1

Somente exploradas (KEV) →

CVE-2026-42418 Alta · 7.1 CWE-79 06/10/2026

WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5.

CVE-2026-1923 Média · 6.4 CWE-79 22/04/2026

Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.