Crafty Social Buttons

Crafty Social Buttons has one disclosed vulnerability in the WordSec catalog, all reported in 2017; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Crafty Social Buttons has a vendor fix available, so running the current release closes it.

Crafty Social Buttons is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Crafty Social Buttons vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2017-18578

Crafty Social Buttons < 1.5.8 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Crafty Social Buttons banner
Latestv1.5.8

Crafty Social Buttons

Sarah

Author

Sarah

4.7(40)
94/100
Last Updated
2017-11-28 (9y ago)
Active Installs
900+
Downloads
115,711
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 4.7.35
Created
2013-11-10 (13y ago)

This plugin adds a set of social buttons to your website, and includes craft-related social sites like Ravelry, Etsy, Craftsy and Pinterest as well as other major social networks, including WhatsApp. Support for sharing to WhatsApp is also provided on mobile devices. You can choose from nine different button styles to match your theme. You can have the share buttons automatically added to the top or bottom of each post, and can position the link buttons using either a widget, a shortcode or a template action hook. You can use the share button and link button functions either separately, or together: Share Button mode allows you to put a set of buttons at the top or bottom of each post. Each button will share that post with that particular service. I.e., clicking the facebook icon will open a window for the user to share your post on their Facebook page. Not all services support sharing, for instance, you can’t share via Etsy or Craftsy. Link Button mode lets you configure the buttons to link directly you your profiles on the social networks. I.e. clicking the facebook icon will take the user to your facebook page, clicking the Etsy icon will take them to your Etsy shop. These are designed to be included in either your header, sidebars or footer, as they are not specific to a post. These can be easily included by adding the Social Link Button widget to the area where you want the buttons to appear. Supported social services include: Craftinoo (link only) Craftsy (link only) Dawanda (link only) Digg Ebay (link only) Email (share only) Etsy (link only) Facebook Flickr (link only) Google+ Instagram (link only) LinkedIn Pinterest Ravelry Reddit Specific Feeds (link only) Stumble Upon Tumblr Twitter Vimeo VK YouTube WhatApp (share only, only on mobile) Xing You can also choose exactly which services you want separately for each mode, so you can can have Share Buttons for Ravelry, Pinterest, Facebook, Twitter and Email, but have Link Buttons for Google+, Craftsy, Pinterest and your Etsy shop. For more information, see the plugin website at http://sarahhenderson.github.io/Crafty-Social-Buttons/ Future Editions These are the things currently in the pipeline: Adding the ability to share/link to Flipboard, Goodreads and 500px Additional options for layout and style of the buttons Shortcode options for more manual control of the buttons (Anything else? You tell me!)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C