Skip to content
OpenAdvisories

Vendor

Socialrocket

4 known vulnerabilities.

Products

Social Rocket – Social Sharing Plugin 3 Social Rocket 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-1923

    Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id

    The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible…

    Socialrocket Social Rocket – Social Sharing Plugin Web / CMS
  • Medium 6.4
    CVE-2024-9702

    Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escapi…

    Socialrocket Social Rocket – Social Sharing Plugin Web / CMS
  • Medium 5.3
    CVE-2024-9697

    Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update

    The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweet_settings_save() and tweet_settings_update() functions in all versions up to, and including, 1.3.4.…

    Socialrocket Social Rocket – Social Sharing Plugin Web / CMS