CVE-2023-4826: Socialdriver < 2024 - Prototype Pollution to XSS

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-23 · updated 2026-06-17
Weakness: CWE-79

Description

The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.

Affected products

socialdriver: before 2024 — fixed in 2024

How to fix

Upgrade to a fixed version: socialdriver 2024. Check the vendor advisory for mitigations.

References

http://socialdriver.com
https://wpscan.com/vulnerability/99ec0add-8f4d-4d68-91aa-80b1631a53bf/
http://socialdriver.com
https://wpscan.com/vulnerability/99ec0add-8f4d-4d68-91aa-80b1631a53bf/

Get alerted when CVE-2023-4826 or the next vulnerability affects your stack