Medium severity5.3NVD Advisory· Published Jan 21, 2025· Updated Jun 17, 2026

CVE-2024-13230

Description

The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the ‘SuperSocializerKey’ parameter in all versions up to, and including, 7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional values into the already existing query that can be used to extract user metadata from the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Super Socializerllm-fuzzy
Range: <=7.14
the_champ/Social Share, Social Login and Social Comments Plugin – Super Socializerv5
Range: 0
WordPress/Social Share, Social Login and Social Commentswp-canonicalize

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3225440/nvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/4d7b2a7f-3c67-4df1-bb15-e7f4f0035953nvdThird Party Advisory
plugins.trac.wordpress.org/browser/super-socializer/trunk/super_socializer.phpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000