CVE-2024-13610

The Simple Social Media Share Buttons WordPress plugin (versions prior to 6.0.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute X...

CVE-2023-5845

The CVE-2023-5845 pertains to the WordPress plugin Simple Social Media Share Buttons (versions prior to 5.1.1). The underlying issue is leakage of password-protected post content to unauthenticated visitors via certain meta tags (notably og:description and twitter:description). Affected component...

CVE-2021-24656

CVE-2021-24656 affects the WordPress plugin Simple Social Media Share Buttons (pre-3.2.4). The issue is an XSS vulnerability where the Share Title setting is not escaped before output to frontend, enabling authenticated, high-privilege users to trigger Cross-Site Scripting. Public exploit details...