CVE-2014-9437: Multiple cross-site request forgery (CSRF) vulnerabilities in the Sliding Social Icons plugin 1.61 for Word...

Security readout for executives and security teams

This issue affects the Sliding Social Icons WordPress plugin version 1.61. An attacker could trick a logged-in administrator into making unwanted plugin setting changes, including changes that may introduce cross-site scripting. The source bundle does not provide a CVSS score, patch version, or evidence of active exploitation. Exposure is likely limited to WordPress sites that installed Sliding Social Icons 1.61 and have administrators who can be socially engineered while authenticated. Sites without this plugin, or without the affected version, are not indicated as affected by the provided sources. Treat as a targeted web administration risk, not a broad infrastructure emergency. Prioritize confirming whether the obsolete plugin is present on public WordPress sites, then remove, replace, or update it according to vendor guidance. Mitigation focus: Identify WordPress sites running Sliding Social Icons 1.61.; Check vendor or plugin repository guidance for a fixed release or supported replacement.; Disable or remove the plugin if no supported fixed version is available..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.