WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT)

WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-60135

WeShare Buttons <= 13.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT) banner
Latestv13.0.0

WeShareAI – AI-Powered Share Buttons (formerly E-MAILiT)

NIKITAS GEORGOPOULOS

Author

NIKITAS GEORGOPOULOS

4.3(65)
86/100
Last Updated
2026-01-15 (8mo ago)
Active Installs
700+
Downloads
353,060
Requires WP
4.5+
Requires PHP
5.6+
Tested up to
WP 6.7.7
Created
2013-02-13 (14y ago)

WeShareAI is a free, lightweight WordPress plugin that adds AI-powered, privacy-first share buttons to your website. Formerly known as E-MAILiT, WeShareAI builds on more than a decade of development in social sharing technology, now reimagined for modern publishers. The plugin is designed to load fast, respect user privacy, and work seamlessly with any WordPress theme — without heavy admin panels or intrusive tracking. Configuration is handled via the external WeShareAI Builder, allowing you to generate your share buttons, choose platforms, and optionally enable post-share monetization, all without bloating your WordPress admin area. Key Features AI-powered smart share buttons Privacy-first architecture (no PII, no user profiling) External builder – no heavy WordPress admin UI Works with any WordPress theme Optional post-share monetization (Thank You Page ads) Universal Bypass: enhance existing share buttons Lightweight, asynchronous loading Free to use How It Works Install and activate the plugin. Generate your share button code via the WeShareAI Builder. Place the buttons on your site using shortcodes, widgets, or theme templates. Optionally enable post-share monetization features. Privacy First WeShareAI is built with privacy at its core. No selling of user data No personal user profiling No invasive tracking Fully GDPR-aware by design Your users share content — not their personal information.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C