Branded Social Images – Open Graph Images with logo and extra text layer
Branded Social Images – Open Graph Images with logo and extra text layer has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Branded Social Images – Open Graph Images with logo and extra text layer has a vendor fix available, so running the current release closes it.
All of these findings were reported by Yuki Haruma. Branded Social Images – Open Graph Images with logo and extra text layer is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-28536Branded Social Images <= 1.1.0 - Missing Authorization leading to Unauthenticated Plugin Settings Updates
Read the full analysisVulnerability Records

Branded Social Images – Open Graph Images with logo and extra text layer
Author
Acato
Branded social images (open graph images) in just a few clicks. This plugin creates branded social images to match with your company’s style. Including a company logo and title. These open graph images can either be auto-generated for the entire site or you have the option to overrule this per page/post. Works with every (public) post-type in WordPress! Also tested with WOOCommerce. The version 2.0.0 branch even supports taxonomies, so you can brand your category and tag pages as well! Check it out on GitHub
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C