← Database

CVE-2021-4434

CRITICAL CVSS: 10.0 Published: 2024-01-17 Modified: 2026-06-17

Description

The Social Warfare plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.5.2 via the 'swp_url' parameter. This allows attackers to execute code on the server.

Affected Platforms

Warfareplugins Social Warfare

Weakness Type

CWE-94, NVD-CWE-noinfo, CWE-94

References