CVE-2026-100108

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100108 Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100108 Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-102817

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-100108

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.30 . The root cause is insufficient input sanitization and output escaping involving the 'form (containing share_url)' parameter. Authenticated attackers with subscri...

CVE-2026-100108: Improper Neutralization of Input During Web Page Generation

The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form containing shareurl' parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Social Share Buttons Cross-site Script Vulnerabilities

Versions of WordPress Social Share Buttons prior to 1.30 have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'form containing shareurl' parameter, which may lead to stored cross-site scripting attacks. Attackers with...