What’s Vulnerable › Vulnerabilities
CVE-2013-1949
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2013-04-25 · updated 2026-06-16
Description
Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload of arbitrary files.
Affected products
References
- http://blog.sucuri.net/2013/04/wordpress-plugin-social-media-widget.html
- http://it.slashdot.org/story/13/04/13/212226/popular-wordpress-plug-in-caught-spamming-is-put-on-probation
- http://securityledger.com/hacked-wordpress-plug-in-put-on-double-secret-probation/
- http://www.openwall.com/lists/oss-security/2013/04/14/1
- http://blog.sucuri.net/2013/04/wordpress-plugin-social-media-widget.html
- http://it.slashdot.org/story/13/04/13/212226/popular-wordpress-plug-in-caught-spamming-is-put-on-probation
- http://securityledger.com/hacked-wordpress-plug-in-put-on-double-secret-probation/
- http://www.openwall.com/lists/oss-security/2013/04/14/1
Get alerted when CVE-2013-1949 or the next vulnerability affects your stack