Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Joao Romao Clear all filters
TI-2026-73810 CVE-2026-103369 · GHSA-hjjc-cf53-fv22

Stored cross-site scripting in Social Share Buttons WordPress plugin

Priority LOW 28

The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'response' parameter in all versions up to, and including, 4.5 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00245 Published 2026-10-14 No fix listed CWE-79
TI-2025-23336 CVE-2025-32239 · GHSA-ghfg-9r57-chqv

WordPress Social Share Buttons & Analytics Plugin plugin <= 4.5 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-04-04 No fix listed CWE-862