Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Social Media Widget Serving Spam - CVE-2013-1949 - Vulnerability Database
WP Plugin Social Media Widget

WordPress Plugin Social Media Widget Serving Spam - CVE-2013-1949

Medium
Reference: CVE-2013-1949
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-1949
Title: WordPress Plugin Social Media Widget Serving Spam
Overview:

WordPress Plugin Social Media Widget has a hidden call to i.aaur.net/i.php which is used to inject Pay Day Loan spam into the web sites running the plugin. WordPress Plugin Social Media Widget version 4.0 is vulnerable other versions may also be affected.