Social Sharing Plugin – Social Warfare

social-warfare · by warfareplugins · wordpress.org ↗ · SVN ↗
Active installs
20k+
Current version
4.5.6
Added
2016-07-13
Last updated
2025-03-18 (1y ago)
First seen by beacon
11d ago
Total downloads
1,927,259

Historical audits (1)

Past investigations, all resolved. No current threat.
  • Cleaned Audit #14 baseline 4.4.6.3 → head 4.4.7.1 5d ago

Alerts (0)

No open alerts.

Show 1 resolved alert
High prt_forum_advisory Resolved · audit:malicious 2026-04-27 12:08:42 (5d ago)
Slugsocial-warfare
Active installs20,000
Is closedno
Thread count1
Earliest thread2024-06-24 10:26:32
Latest thread2024-06-24 10:26:32
Threads
TitleUrlDateStarterPreview
A Security Message from the Plugin Review Teamhttps://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/2024-06-24 10:26:32alvaro gómezThe WordPress.org Plugin Review Team was notified that a malicious actor had taken over Social Sharing Plugin – Social Warfare. As a result, versions 4.4.6.4 to 4.4.7.1 of the plugin created users with administrative privileges. The Plugin
ExplanationA wp.org Plugin Review Team member started one or more threads on this plugin's support forum. PRT-initiated threads are typically incident advisories ("A Security Message from the Plugin Review Team") posted only after they have confirmed an issue.
View raw JSON
{
    "slug": "social-warfare",
    "active_installs": 20000,
    "is_closed": false,
    "thread_count": 1,
    "earliest_thread": "2024-06-24 10:26:32",
    "latest_thread": "2024-06-24 10:26:32",
    "threads": [
        {
            "title": "A Security Message from the Plugin Review Team",
            "url": "https://wordpress.org/support/topic/a-security-message-from-the-plugin-review-team/",
            "date": "2024-06-24 10:26:32",
            "starter": "alvaro g\u00f3mez",
            "preview": "The WordPress.org Plugin Review Team was notified that a malicious actor had taken over Social Sharing Plugin \u2013 Social Warfare. As a result, versions 4.4.6.4 to 4.4.7.1 of the plugin created users with administrative privileges. The Plugin "
        }
    ],
    "explanation": "A wp.org Plugin Review Team member started one or more threads on this plugin's support forum. PRT-initiated threads are typically incident advisories (\"A Security Message from the Plugin Review Team\") posted only after they have confirmed an issue."
}

SVN committers (4)

Accounts with actual commit access to social-warfare on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
WarfarePlugins 2015-08-19 196 2016-07-13 · r1453777 2025-03-18 · r3257672
Francisco Torres 2012-02-08 3 2024-06-23 · r3106250 2024-06-29 · r3109504
Dion Hulse 2005-01-20 1 2024-06-24 · r3106384 2024-06-24 · r3106384
plugin-master 2007-03-09 1 2016-07-07 · r1450358 2016-07-07 · r1450358

Readme contributors (6)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
WarfarePlugins 2015-08-19 196 commits Active
Andrii Balashov 2023-05-21 Active
Christine 2017-06-08 Active
Grigor Asatryan 2013-06-22 Active
holas84 2009-08-27 Active
Jason T. Wiser 2010-06-10 Active

Versions (71 most recent)

Version Released Download
4.5.6 2025-03-18 · 1y ago zip
4.5.5 2025-03-02 · 1y ago zip
4.5.4 2024-09-17 · 1y ago zip
4.5.3 2024-08-13 · 1y ago zip
4.5.2 2024-08-07 · 1y ago zip
4.5.1 2024-08-02 · 1y ago zip
4.5.0 2024-08-02 · 1y ago zip
4.4.8 2024-07-16 · 1y ago zip
4.4.7.3 2024-06-24 · 1y ago zip
4.4.7.2 2024-06-23 · 1y ago zip
4.4.6.3 2024-04-07 · 2y ago zip
4.4.6.2 2024-04-03 · 2y ago zip
4.4.6.1 2024-03-21 · 2y ago zip
4.4.6 2024-03-12 · 2y ago zip
4.4.5.1 2024-01-11 · 2y ago zip
4.4.5 2024-01-10 · 2y ago zip
4.4.4 2023-10-23 · 2y ago zip
4.4.3 2023-10-19 · 2y ago zip
4.4.2 2023-09-28 · 2y ago zip
4.4.1 2023-02-15 · 3y ago zip
4.4.0 2023-01-25 · 3y ago zip
4.3.0 2023-01-20 · 3y ago zip
4.2.1 2021-07-20 · 4y ago zip
4.2.0 2020-12-03 · 5y ago zip
4.1.0 2020-08-18 · 5y ago zip
4.0.2 2020-07-28 · 5y ago zip
4.0.1 2020-04-14 · 6y ago zip
4.0.0 2020-04-01 · 6y ago zip
3.6.1 2019-12-24 · 6y ago zip
3.6.0 2019-06-03 · 6y ago zip
3.5.4 2019-04-23 · 7y ago zip
3.5.3 2019-03-22 · 7y ago zip
3.5.0 2019-03-20 · 7y ago zip
3.5.1 2019-03-20 · 7y ago zip
3.5.2 2019-03-20 · 7y ago zip
3.4.2 2019-01-18 · 7y ago zip
3.4.1 2018-12-14 · 7y ago zip
3.4.0 2018-11-30 · 7y ago zip
3.3.3 2018-09-19 · 7y ago zip
3.3.0 2018-09-14 · 7y ago zip
3.3.1 2018-09-14 · 7y ago zip
3.3.2 2018-09-14 · 7y ago zip
3.2.2 2018-08-21 · 7y ago zip
3.2.1 2018-08-16 · 7y ago zip
3.2.0 2018-08-13 · 7y ago zip
3.1.1 2018-07-12 · 7y ago zip
3.1.0 2018-07-11 · 7y ago zip
3.0.9 2018-06-08 · 7y ago zip
3.0.8 2018-05-25 · 7y ago zip
3.0.6 2018-05-15 · 7y ago zip
2.3.4 2018-05-11 · 7y ago zip
3.0.5 2018-05-11 · 7y ago zip
3.0.1 2018-05-09 · 7y ago zip
3.0.0 2018-05-09 · 7y ago zip
2.3.5 2018-01-12 · 8y ago zip
2.3.3 2017-09-27 · 8y ago zip
2.3.2 2017-08-25 · 8y ago zip
2.3.1 2017-08-20 · 8y ago zip
2.3.0 2017-08-19 · 8y ago zip
2.2.11 2017-07-27 · 8y ago zip
2.2.10 2017-07-03 · 8y ago zip
2.2.9 2017-06-29 · 8y ago zip
2.2.8 2017-06-29 · 8y ago zip
2.2.7 2017-06-15 · 8y ago zip
2.2.6 2017-05-24 · 8y ago zip
2.2.5 2017-05-10 · 8y ago zip
2.2.4 2017-05-09 · 8y ago zip
2.2.2 2017-02-22 · 9y ago zip
2.2.3 2017-02-22 · 9y ago zip
2.0.4 2016-08-22 · 9y ago zip
1.4.8 2016-08-02 · 9y ago zip