AddToAny Share Buttons

AddToAny Share Buttons has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2021; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.4 out of 10. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Improper Input Validation.

Every one of the 3 issues recorded for AddToAny Share Buttons has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. AddToAny Share Buttons is installed on roughly 300,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all AddToAny Share Buttons vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2021-24568

AddToAny Share Buttons <= 1.7.45 - Authenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
AddToAny Share Buttons banner
Latestv1.8.18

AddToAny Share Buttons

micropat

Author

micropat

4.7(1,114)
94/100
Last Updated
2026-05-22 (4mo ago)
Active Installs
300,000+
Downloads
19,050,515
Requires WP
4.5+
Requires PHP
5.6+
Tested up to
WP 7.0.4
Created
2007-03-17 (20y ago)

The AddToAny Share Buttons plugin for WordPress increases traffic & engagement by helping people share your posts and pages to any service. Services include Facebook, Bluesky, Mastodon, Pinterest, WhatsApp, LinkedIn, Threads, Tumblr, Reddit, X, WeChat, and many more sharing and social media sites & apps. AddToAny is the home of universal sharing, and the AddToAny plugin is the most popular share plugin for WordPress, making sites social media ready since 2006. Share Buttons Standard share buttons — share each piece of content Floating share buttons — responsive & customizable, vertical & horizontal Counters — fast & official share counts in the same style Follow buttons — social media links to your Instagram, YouTube, Discord, Snapchat Image sharing buttons – share buttons for sharing images Vector share buttons & follow buttons — custom color SVG icons Custom share icons — use your own if you prefer Official buttons including the Facebook Like Button, Pinterest Save Button, and LinkedIn Share Button Universal email sharing makes it easy to share via Gmail, Yahoo Mail, Outlook.com (Hotmail), AOL Mail, and any other web or native apps Custom Placement & Appearance Before content, after content, or before & after content Vertical Floating Share Bar, and Horizontal Floating Share Bar As a shortcode, or a widget within a theme’s layout Programmatically with template tags Analytics Integration Google Analytics integration (access guide) for sharing analytics Track shared links with Bitly and custom URL shorteners Display share counts on posts and pages WordPress Optimized Loads asynchronously so your content always loads before or in parallel with AddToAny Supports theme features such as HTML5, widgets, infinite scroll, post formats Supports WooCommerce, multilingual sites, multisite networks, and accessibility standards AddToAny is free — no signup, no login, no accounts to manage Mobile Optimized & Retina Ready AddToAny gives users the choice in sharing from a service’s native app or from a web app Responsive Floating Share Buttons are mobile ready by default, and configurable breakpoints make floating buttons work with any theme AddToAny’s SVG icons are super-lightweight and pixel-perfect at any size, and AddToAny’s responsive share menu fits on all displays Automatic AMP (Accelerated Mobile Pages) support for social share buttons on AMP pages Customizable & Extensible Choose exactly where you want AddToAny to appear Easily customize sharing on your WordPress site Highly extensible for developers and designers Custom icons let you use any icons from any location (media uploads directory, CDN, etc.) Many more publisher and user features Wide Support Over 10 years of development Over 18 million downloads Translated into dozens of languages Ongoing support from the community This plugin always strives to be the best WordPress plugin for sharing. Development is fueled by your kind words and feedback. Share this plugin See also: The share buttons for all platforms The share buttons for WordPress.com AddToAny Blog | Privacy Policy

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C