WordPress plugin
코드엠샵 소셜톡 security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All 코드엠샵 소셜톡 vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.2.1No patch available | CVE-2025-58828 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.2.0Update to 1.2.1 | CVE-2024-11904 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via add_plus_friends and add_plus_talk Shortcodes ≤1.1.18Update to 1.2.0 | CVE-2024-11229 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.2.1No patch available
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.2.0Update to 1.2.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via add_plus_friends and add_plus_talk Shortcodes
≤1.1.18Update to 1.2.0
코드엠샵 소셜톡: common questions
Does 코드엠샵 소셜톡 have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in 코드엠샵 소셜톡: 3 medium. At least one is not fixed in the latest version.
How do I check which version of 코드엠샵 소셜톡 I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent 코드엠샵 소셜톡 vulnerability?
CVE-2025-58828, published Sep 5, 2025: 코드엠샵 소셜톡 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any 코드엠샵 소셜톡 vulnerability listed in CISA KEV?
No. None of the known 코드엠샵 소셜톡 vulnerabilities is currently listed in the CISA KEV catalog.