sharethis

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

sharethis records in CISA KEV

No sharethis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dashboard For Google Analytics 2 records LOW Simple Share Buttons Adder 2 records MEDIUM Sharethis 1 record LOW Sharethis Share Buttons 1 record LOW Social Media Feather 1 record LOW

Records

2 records in Dashboard For Google Analytics · all components

TI-2025-01296 CVE-2025-1507 · GHSA-h9fj-cm5p-mfqv

ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation

LOW 30

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00282 Published 2025-03-14 No fix listed CWE-862

TI-2021-06728 CVE-2021-24438 · GHSA-2g38-36pm-wvv2

ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)

LOW 29

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the plugin is connected to…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-08-30 Fixed in 2.5.2 CWE-79

Open these records in search →