CVE Database /
CVE-2024-13230
CVE · Medium
CVE-2024-13230 — Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.14.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-13230
|
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.14.1 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Medium
5.3
|
< 7.14.1
|
7.14.1 |
2025-01-20 |
—
|
CVE-2024-13230
The Super Socializer plugin for WordPress contains a limited SQL injection vulnerability affecting versions 7.14 and earlier through the 'SuperSocializerKey' parameter, which is inadequately escaped and used in an insufficiently prepared database query. Unauthenticated attackers can exploit this flaw to inject additional SQL commands that extract sensitive user metadata from the database. The vulnerability was patched in version 7.14.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings