CVE-2026-100108

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-102817

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100108 Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100108

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.30 . The root cause is insufficient input sanitization and output escaping involving the 'form (containing share_url)' parameter. Authenticated attackers with subscri...