Social Media Widget

social_media_widget

Vendor: Acurax • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-6357

1Acurax

1Social Media Widget

Jun 17, 2026

Jan 27, 2018

N/A· v4

8.8 HIGH· v3

6.8 MEDIUM· v2

The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widge...Show more