WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Custom Share Buttons with Floating Sidebar plugin versions prior to 4.2 are vulnerable to a cross-site scripting vulnerability that stems from a failure to clean and escape some of its settings, which can be exploited to execute stored cross-site scripting attacks when the unfiltered_html feature is disabled.