CVE-2019-9978

WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability

WordPress — Social Warfare Plugin

Added to KEV catalog: 3 November 2021
Federal remediation due date: 3 May 2022
Weakness classification (CWE): CWE-79

CISA Description

WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-9978

View on NVD View on MITRE CVE View full CISA catalog

More WordPress Vulnerabilities

CVE-2026-60137

WordPress Core SQL Injection Vulnerability

CVE-2026-63030

WordPress Core Interpretation Conflict Vulnerability

CVE-2020-25213

WordPress File Manager Plugin Remote Code Execution Vulnerability

CVE-2020-11738

WordPress Snap Creek Duplicator Plugin File Download Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services