Vulnerabilities

TI-2024-00576 CVE-2024-0621 · GHSA-362w-hwf4-9hcx

Simple Share Buttons Adder <= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings

LOW 23

The Simple Share Buttons Adder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.4.11 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00491 Published 2024-02-20 No fix listed CWE-79

TI-2022-23382 CVE-2022-47178 · GHSA-jfmw-4923-wxcw

WordPress Simple Share Buttons Adder Plugin <= 8.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Simple Share Buttons Simple Share Buttons Adder plugin <= 8.4.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-05-25 No fix listed CWE-352

TI-2015-07680 CVE-2015-9303 · GHSA-x5rw-hv6h-jjmw

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.

LOW 29

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00958 Published 2019-08-12 No fix listed CWE-79

Vulnerabilities

Filters

Simple Share Buttons Adder <= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings

WordPress Simple Share Buttons Adder Plugin <= 8.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.