CVE-2019-9978
WordPress Social Warfare Plugin
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
What it is
WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other WordPress entries on the list
- WordPress Core WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CVE-2026-119977 · Nov 3, 2026
- Core WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 · Sep 25, 2026
- Core WordPress Core Interpretation Conflict Vulnerability CVE-2026-63030 · Jul 21, 2026
- Core WordPress Core SQL Injection Vulnerability CVE-2026-60137 · Jul 21, 2026
- File Manager Plugin WordPress File Manager Plugin Remote Code Execution Vulnerability CVE-2020-25213 · Nov 3, 2021
- Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability CVE-2020-11738 · Nov 3, 2021