{"api_version":"1","generated_at":"2026-07-23T10:47:37+00:00","cve":"CVE-2013-6280","urls":{"html":"https://cve.report/CVE-2013-6280","api":"https://cve.report/api/cve/CVE-2013-6280.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-6280","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-6280"},"summary":{"title":"CVE-2013-6280","description":"Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-10-25 14:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://wordpress.org/plugins/social-sharing-toolkit/changelog","name":"http://wordpress.org/plugins/social-sharing-toolkit/changelog","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"WordPress › Social Sharing Toolkit « WordPress Plugins","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6280","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6280","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.0.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.0.1","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.2.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.2.5","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.3.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.3.1","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"1.3.2","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.1","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.2","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.3","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.4","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.5","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.6","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.7","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.8","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.0.9","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"2.1.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6280","vulnerable":"1","versionEndIncluding":"2.1.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"linksalpha","cpe5":"social_sharing_toolkit_plugin","cpe6":"*","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:39:01.146Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wordpress.org/plugins/social-sharing-toolkit/changelog"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-10-25T14:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://wordpress.org/plugins/social-sharing-toolkit/changelog"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-6280","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://wordpress.org/plugins/social-sharing-toolkit/changelog","refsource":"CONFIRM","url":"http://wordpress.org/plugins/social-sharing-toolkit/changelog"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-6280","datePublished":"2013-10-25T14:00:00.000Z","dateReserved":"2013-10-25T00:00:00.000Z","dateUpdated":"2024-09-16T22:31:18.073Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-10-25 14:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:*:-:*:*:*:wordpress:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"DF3C58DB-DBAD-4556-B144-A4ECAF1C3C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.0.0:-:*:*:*:wordpress:*:*","matchCriteriaId":"826E24C9-A49F-4845-96E6-F8F0BD516291"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.0.1:-:*:*:*:wordpress:*:*","matchCriteriaId":"CC824C29-370D-428D-90DE-B990A75499D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.2.0:-:*:*:*:wordpress:*:*","matchCriteriaId":"D1C78AC5-DA34-42F6-8B98-AE3DFE0531A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.2.5:-:*:*:*:wordpress:*:*","matchCriteriaId":"0CBC9391-F3BE-4809-AA23-D87B59B9679E"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.3.0:-:*:*:*:wordpress:*:*","matchCriteriaId":"F72BFE73-67A6-4D7B-8E17-9BB1434C3E76"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.3.1:-:*:*:*:wordpress:*:*","matchCriteriaId":"8C808DA9-2D6D-4EC6-B042-B3B711C0D281"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:1.3.2:-:*:*:*:wordpress:*:*","matchCriteriaId":"EDA90326-8924-4189-B4B1-E2919FD4DB2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.0:-:*:*:*:wordpress:*:*","matchCriteriaId":"31570E9B-5646-4146-8D50-44E553EDC25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.1:-:*:*:*:wordpress:*:*","matchCriteriaId":"D79E5306-0919-44D5-B7D0-1656DCAEA6C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.2:-:*:*:*:wordpress:*:*","matchCriteriaId":"304102D3-E967-4BA4-96A7-CD984D17E6D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.3:-:*:*:*:wordpress:*:*","matchCriteriaId":"9076A536-0848-40A4-8767-40B64B728D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.4:-:*:*:*:wordpress:*:*","matchCriteriaId":"76D6D588-2931-41D4-89DC-7AA30B1EF6AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.5:-:*:*:*:wordpress:*:*","matchCriteriaId":"E572C6E5-6984-4598-BB85-C96DD5F49D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.6:-:*:*:*:wordpress:*:*","matchCriteriaId":"A5B613C5-1C2F-4A74-9132-D990EFBCF909"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.7:-:*:*:*:wordpress:*:*","matchCriteriaId":"5D00A15A-A3F5-4E1C-9E48-FC91B1AFF641"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.8:-:*:*:*:wordpress:*:*","matchCriteriaId":"0C62097F-AA79-42E3-801A-3D180E9C79A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.0.9:-:*:*:*:wordpress:*:*","matchCriteriaId":"AECA0409-12B4-4BCB-A277-780D8F6C3BE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:linksalpha:social_sharing_toolkit_plugin:2.1.0:-:*:*:*:wordpress:*:*","matchCriteriaId":"05BDFE18-2509-458F-88D7-A149D1067429"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"6280","Ordinal":"1","Title":"CVE-2013-6280","CVE":"CVE-2013-6280","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"6280","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","Type":"Description","Title":"CVE-2013-6280"},{"CveYear":"2013","CveId":"6280","Ordinal":"2","NoteData":"2013-10-25","Type":"Other","Title":"Published"}]}}}