What’s Vulnerable › Vulnerabilities

CVE-2015-9433

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-26 · updated 2026-06-17
• Weakness: CWE-352

Description

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.

Affected products

• utahta WP Social Bookmarking Light: before 1.7.10 — fixed in 1.7.10

How to fix

Upgrade to a fixed version: utahta WP Social Bookmarking Light 1.7.10. Check the vendor advisory for mitigations.

References

• http://cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html
• https://wordpress.org/plugins/wp-social-bookmarking-light/#developers
• https://wpvulndb.com/vulnerabilities/8252
• http://cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html
• https://wordpress.org/plugins/wp-social-bookmarking-light/#developers
• https://wpvulndb.com/vulnerabilities/8252

Get alerted when CVE-2015-9433 or the next vulnerability affects your stack