Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WPBrigade Component: Simple Social Buttons Clear all filters
TI-2024-12651 CVE-2024-13610 · GHSA-jcc3-vmjf-jfhj

Simple Social Media Share Buttons < 6.0.0 - Admin+ Stored XSS

Priority MEDIUM 55

The Simple Social Media Share Buttons WordPress plugin before 6.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks e…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00278 Published 2025-04-15 Fixed in 6.0.0 CWE-79
TI-2021-06938 CVE-2021-24656 · GHSA-jr4w-g4rp-m3m8

Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting

Priority LOW 23

The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege u…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-10-11 Fixed in 3.2.4 CWE-79