DX Share Selection
DX Share Selection has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for DX Share Selection has a vendor fix available, so running the current release closes it.
All of these findings were reported by Sho Sakata. DX Share Selection is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.
CVE-2022-2001DX Share Selection <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting
Read the full analysisVulnerability Records

DX Share Selection
Author
Mario Peshev
This is a fork of WP Selected Text Sharer which hasn’t been maintained for a few years. Allows you to share/search selected text from your site – select a snippet, search for it or share it to popular social networks. A small popup is displayed above the selected text which contains links to share/search selected text. Instructions When a user selects a text snippet in a page or post of your site, a popup is displayed. When that quote is tweeted (or shared in another social network), the selected Quote and the link to that blog post is also shared in the following network. Hence increasing site visibility. Search engines (Your site’s search / Google adsense search / Yahoo search etc …) can also be added to the popup. Apart from sharing texts only, this plugin also acts like a social bookmarking button. Features Lightweight, 4KB jquery plugin is required. Various color/style and option arguments. Automatic selected text truncation for Twitter. Shorten the post link using Bitly. Load the scripts either in header or footer. Simple and light interface. Template system for adding links to the popup. No knowledge of coding required. Integration with WP Socializer plugin Credits Core jQuery plugin, original WP Selected Text Sharer plugin by Aakash Chakravarthy (vaakash)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C