{"id":"CVE-2019-9978","kind":"vulnerability","aliases":["CVE-2019-9978"],"related":[],"title":"WordPress Social Warfare Plugin: WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","description":"WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.\n\nCISA required action: Apply updates per vendor instructions.","summary":"The Social Warfare WordPress plugin has a cross-site scripting flaw that lets an attacker inject script into pages served by the site. The sources describe the impact as remote code execution, and CISA lists it as actively exploited.","severity":"medium","cvss":6.1,"epss":0.72946,"exploited":true,"exploited_at":"2021-11-03T00:00:00+00:00","products":[{"name":"WordPress Social Warfare Plugin","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","package","self-hosted","social-warfare","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"Check the installed Social Warfare or Social Warfare Pro plugin version in the WordPress admin plugins list; affected and fixed versions are unknown from the sources.","fix":"Update Social Warfare and Social Warfare Pro to the latest vendor release, or remove the plugin if it is not needed; the exact fixed version is unknown from the sources.","status":"open","published_at":"2019-03-24T15:29:00+00:00","first_seen_at":"2026-10-23T19:11:53+00:00","triaged_at":"2026-10-23T20:29:43+00:00","updated_at":"2026-10-23T20:29:43+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T20:29:43Z","model":"claude-haiku-5-5","output":{"fix":"Update Social Warfare and Social Warfare Pro to the latest vendor release, or remove the plugin if it is not needed; the exact fixed version is unknown from the sources.","summary":"The Social Warfare WordPress plugin has a cross-site scripting flaw that lets an attacker inject script into pages served by the site. The sources describe the impact as remote code execution, and CISA lists it as actively exploited.","category":"package","who_cares":["wordpress","social-warfare","self-hosted"],"confidence":0.6,"analyst_note":"Confirm the fixed version and whether the XSS-to-RCE claim is accurate, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2019-9978 and the CISA KEV listing.","how_to_check":"Check the installed Social Warfare or Social Warfare Pro plugin version in the WordPress admin plugins list; affected and fixed versions are unknown from the sources.","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"severity_if_unknown":"medium"},"cost_usd":0.0004,"input_tokens":2139,"output_tokens":373,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2019':16A,19A '-9978':17A,20A 'action':103C 'activ':72B 'affect':94C 'allow':87C 'appli':104C 'attack':49B 'cisa':68B,101C 'code':65B,90C 'contain':78C 'cross':10A,42B,81C 'cross-sit':9A,41B,80C 'cve':15A,18A 'describ':60B 'execut':66B,91C 'exploit':25B,73B 'flaw':45B 'host':29B 'impact':62B 'inject':50B 'instruct':108C 'let':47B 'list':69B 'packag':26B 'page':53B 'per':106C 'plugin':4A,8A,24A,38B,77C 'pro':100C 'remot':64B,89C 'requir':102C 'script':12A,44B,51B,83C 'self':28B 'self-host':27B 'serv':54B 'site':11A,43B,57B,82C 'social':2A,6A,22A,31B,35B,75C,95C,98C 'social-warfar':30B 'sourc':59B 'updat':105C 'vendor':107C 'vulner':14A,85C,93C 'warfar':3A,7A,32B,36B,76C,96C,99C 'warfare':23A 'wordpress':1A,5A,21A,33B,37B,74C 'xss':13A,84C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2019-03-24T15:29:00+00:00","kev":{"dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2019-9978","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-9978","severity":null,"published_at":"2021-11-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:53+00:00","fetched_at":"2026-10-25T10:39:08+00:00","note":null},{"source":"epss","external_id":"CVE-2019-9978","url":"https://api.first.org/data/v1/epss?cve=CVE-2019-9978","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2019-9978","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9978","severity":null,"published_at":"2019-03-24T15:29:00+00:00","modified_at":"2026-06-17T02:44:58+00:00","first_seen_at":"2026-10-23T19:35:23+00:00","fetched_at":"2026-10-23T19:35:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}