Live › vulnerability › CVE-2019-9978
Go to dashboardThe Social Warfare WordPress plugin has a cross-site scripting flaw that lets an attacker inject script into pages served by the site. The sources describe the impact as remote code execution, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| WordPress Social Warfare Plugin | vendor | – | – |
Check the installed Social Warfare or Social Warfare Pro plugin version in the WordPress admin plugins list; affected and fixed versions are unknown from the sources.
Update Social Warfare and Social Warfare Pro to the latest vendor release, or remove the plugin if it is not needed; the exact fixed version is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-9978")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.