Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Social Media Share Buttons & Social Sharing Icons 3.0.1 Clear all filters
TI-2026-16000 CVE-2026-19723 · GHSA-3qmf-g4j6-v744

Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler

Priority LOW 31

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-09-02 Fixed in 3.0.1 CWE-79
TI-2026-15998 CVE-2026-19719 · GHSA-5959-3p9c-8939

Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title

Priority LOW 32

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-02 Fixed in 3.0.1 CWE-79