Read the docs

Addtoany

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Addtoany records in CISA KEV

No Addtoany vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Addtoany Share Buttons 2 records LOW

Records

2 records

TI-2021-06853 CVE-2021-24568 · GHSA-x39g-7rq2-35qp

AddToAny < 1.7.46 - Authenticated Stored XSS

Priority LOW 25

The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting it in frontend pages, allowing high privilege users such as admin to perform Cross-Site Scripting att…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 1.7.46 CWE-79
TI-2021-06899 CVE-2021-24616 · GHSA-7c73-p742-56xg

AddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The AddToAny Share Buttons WordPress plugin before 1.7.48 does not escape its Image URL button setting, which could lead allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html ca…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00676 Published 2021-11-08 Fixed in 1.7.48 CWE-79
Open these records in search →