CVE-2022-1653

4.3 mediumEPSS 0.4%

Medium (4.3) in supsystic social share buttons. EPSS 0.4% chance of exploitation in the next 30 days.

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin settings, as well as create, delete and rename projects and networks.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

supsystic:social_share_buttons

References

https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48
https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48

Check your stack JSON