PatchTheCVEfloating social bar vulnerabilities and fixes
Recent CVEs affecting floating social bar, with upgrade or downgrade steps. 2 tracked.
Also searched as: floatingsocialbar.
floating social bar has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-09-19. Highest priority: CVE-2015-3299 (score 41/100).
- CVE-2015-5528 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Fl
- CVE-2015-3299 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows r
FAQ
How do I fix floating social bar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is floating social bar being exploited right now?
None of the tracked floating social bar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which floating social bar CVE should I patch first?
CVE-2015-3299 currently ranks highest (41/100): Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows r.