Vulnerabilities

TI-2025-39641 CVE-2025-64198 · GHSA-jgfp-mcxc-wwr9

WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Shar…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00185 Published 2025-11-06 No fix listed CWE-79

TI-2025-32820 CVE-2025-52770 · GHSA-35mh-hxcm-w9xp

WordPress Hello Followers plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through <= 2…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-10-22 No fix listed CWE-79

TI-2024-20683 CVE-2024-31307 · GHSA-9xh3-327m-wgfm

WordPress Easy Social Share Buttons plugin <= 9.4 - Multiple Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in appscreo Easy Social Share Buttons.This issue affects Easy Social Share Buttons: from n/a through 9.4.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00284 Published 2024-06-09 No fix listed CWE-862

TI-2024-20676 CVE-2024-31300 · GHSA-gjvv-2p97-659w

WordPress Easy Social Share Buttons plugin <= 9.4 - Local File Inclusion vulnerability

LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appscreo Easy Social Share Buttons allows PHP Local File Inclusion.This issue affects Easy Social Share Buttons: from n/a th…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00573 Published 2024-05-17 No fix listed CWE-22

TI-2024-19942 CVE-2024-30196 · GHSA-cg3f-mg26-wjp3

WordPress Easy Social Share Buttons plugin <= 9.4 - Reflected Cross Site Scripting (XSS) vulnerability