AccessPress Social Icons < 1.8.1 - Authenticated SQL Injection
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.
Affected products
Unknown · AccessPress Social Icons