CVE-2024-13610

The Simple Social Media Share Buttons WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisi...

CVE-2023-5845

The CVE-2023-5845 pertains to the WordPress plugin Simple Social Media Share Buttons (versions prior to 5.1.1). The underlying issue is leakage of password-protected post content to unauthenticated visitors via certain meta tags (notably og:description and twitter:description). Affected component...

CVE-2021-24656

CVE-2021-24656 affects the WordPress plugin Simple Social Media Share Buttons (pre-3.2.4). The issue is an XSS vulnerability where the Share Title setting is not escaped before output to frontend, enabling authenticated, high-privilege users to trigger Cross-Site Scripting. Public exploit details...