CVE-2023-5070

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:05+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY...

CVE-2023-5070

CVE-2023-5070 affects the WordPress plugin “Social Media Share Buttons & Social Sharing Icons” (slug: ultimate-social-media-icons) up to and including version 2.8.5. Root cause: sfsi_save_export export flow allows exporting plugin settings, exposing sensitive data (social tokens, secrets, app pas...

WordPress Social Media & Share Icons Plugin <= 2.8.5 is vulnerable to Sensitive Data Exposure

Software Social Media & Share Icons Type Plugin Vulnerable versions = 2.8.5 Fixed in 2.8.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5070 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 041c1c8cf3d2 Credits Marco...