EUVD-2026-69834

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...

CVE-2026-19719

CVE-2026-19719 affects the Social Media Share Buttons & Social Sharing Icons WordPress plugin (versions before 3.0.1 ). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by an unescaped post title being output into an inline JavaScript event handler. Exploitation requires a user wit...

CVE-2026-19723

The Social Media Share Buttons & Social Sharing Icons WordPress plugin (before 3.0.1 ) contains a Reflected Cross-Site Scripting vulnerability via the Pin It Share Handler . The root cause is a failure to properly escape a value taken from the incoming request before outputting it in an inline Ja...

CVE-2024-2118

CVE-2024-2118 affects the WordPress plugin Social Media Share Buttons & Social Sharing Icons (Ultimate Social Media Icons) up to version 2.8.9. The issue is due to insufficient sanitization/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., admins), including scenari...

WordPress Plugin Social Media Share Buttons & Social Sharing Icons 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in the WordPress Plugi...

PT-2023-32206 · WordPress · Social Media Share Buttons & Social Sharing Icons

Name of the Vulnerable Software and Affected Versions: Social Media Share Buttons & Social Sharing Icons plugin for WordPress versions up to, and including, 2.8.5 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on several functions...

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

CVE-2023-41238

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin = 2.8.3 versions...

CVE-2023-41238

The CVE-2023-41238 entry concerns the WordPress plugin Ultimate Social Media Icons & Social Sharing Icons (often listed as Social Media Share Buttons & Social Sharing Icons) with versions

PT-2023-27861 · WordPress · Ultimatelysocial Social Media Share Buttons & Social Sharing Icons

Name of the Vulnerable Software and Affected Versions: UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin versions = 2.8.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites,...