CVE-2011-5182: Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0...

Security readout for executives and security teams

CVE-2011-5182 is a reported cross-site scripting issue in Lanoba Social plugin 1.0 for WordPress. The report says a remote attacker could inject script through the action parameter. The vendor disputed the finding, stating input is sanitized and not returned to the browser. No active exploitation is documented in the provided sources. Exposure is likely limited to WordPress sites that installed Lanoba Social plugin version 1.0. The provided data does not identify broader affected versions, current package status, or whether the disputed issue is practically exploitable. Treat as a low-urgency verification item unless the plugin is present on important WordPress sites. The issue is old, disputed, and lacks confirmed exploitation or severity data, but unused legacy plugins should still be removed to reduce attack surface. Mitigation focus: Inventory WordPress sites for Lanoba Social plugin 1.0.; Remove the plugin if unused or no longer maintained.; Check WordPress and vendor guidance for any official update or clarification..

Prepared

Jun 27, 2026, 18:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.