Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Easy Social Icons 4.0.3 Clear all filters
TI-2026-85365 CVE-2026-105259 · GHSA-mj83-jwjj-9xg3

Easy Social Icons Author+ Stored XSS via SVG Upload

Priority LOW 32

The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise SVG files, which it adds to the list of file types that may be uploaded site-wide, allowing users with the Author role and above to upload a malicious…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00235 Published 2026-11-05 Fixed in 4.0.3 CWE-79
TI-2025-44019 CVE-2025-15701 · GHSA-5357-j85q-w34p

Stored cross-site scripting in Easy Social Icons WordPress plugin

Priority LOW 16

The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting them on front-end pages, which could allow high-privilege users such as Administrators to perform St…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00142 Published 2026-11-05 Fixed in 4.0.3 CWE-79