← Back to browse · API

CVE-2021-4434

Severity
CRITICAL
CVSS
10.0
EPSS
0.01923
Risk score
40.67
CISA KEV
No
PoC
No
Published
2024-01-17
Modified
2026-04-08
First seen
2026-08-07
Aliases
EUVD-2021-34261, GHSA-6GJP-6PV7-W558
Products
warfareplugins:Social Sharing Plugin – Social Warfare 0 <3.5.3
Sources
euvd EUVD-2021-34261

Description

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows attackers to execute code on the server.

References