Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: inisev Component: Social Media Share Buttons & Social Sharing Icons Clear all filters
TI-2024-09597 CVE-2024-10362 · GHSA-28fx-qww6-g655

Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS

Priority MEDIUM 55

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.9.1 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scr…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00355 Published 2025-05-15 Fixed in 2.9.1 CWE-79
TI-2024-25052 CVE-2024-37552 · GHSA-7g27-x75h-4gf5

WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a thr…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00311 Published 2024-07-21 No fix listed CWE-79
TI-2024-01968 CVE-2024-2118 · GHSA-vv98-j6p5-8hj3

Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings

Priority LOW 27

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scr…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00405 Published 2024-04-17 Fixed in 2.8.9 CWE-79