VULNERABILITY INTELLIGENCE

CVE-2021-4362

CVSS score9.8 CRITICAL

EPSS probability1.42%

CISA KEVNot currently listed

Published2023-06-07

Last modified2026-06-17

Description

The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and…