Social Sharing Plugin – Kiwi

Social Sharing Plugin – Kiwi has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2018 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. Social Sharing Plugin – Kiwi is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh

7.8/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Social Sharing Plugin – Kiwi vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-58790

Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2025-09-05 00:00	Kiwi <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Social Sharing Plugin <= 2.1.8	`CVE-2025-58790`	6.4 Medium	theviper17y	No
2024-07-08 00:00	Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure Social Sharing Plugin <= 2.1.7	`CVE-2024-3228`	5.3 Medium	Krzysztof Zając	Yes
2021-06-04 00:00	Kiwi Social Sharing 2.1.0 - 2.1.2 - Arbitrary Options Change Social Sharing Plugin 2.1.0 – 2.1.2	`CVE-2021-4362`	9.8 Critical	Jerome Bruandet	Yes
2018-11-12 00:00	Kiwi Social Share <= 2.0.10 - Arbitrary Options Update Social Sharing Plugin <= 2.0.10	`N/A`	9.8 Critical	Anonymous	Yes

Showing 1–4 of 4 reports

Latestv2.1.9.1

Social Sharing Plugin – Kiwi

Author

WPKube

4.1(18)

82/100

Last Updated

2026-07-30 (2mo ago)

Active Installs

4,000+

Downloads

472,489

Requires WP

4.0+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2016-06-20 (10y ago)

Kiwi Social Share is a standalone plugin built, maintained & operated by the friendly folks over at WPKube This is by far the best & easiest to use WordPress social media share plugin. A WordPress share plugin with custom icons built-in. Plugin Options Social networks available: Facebook, Twitter, LinkedIN, Pinterest and Flint. Turn on/off each of them, individually. Great UI with intuitive & simple options. Built for the regular user. Change the style of the article bar group. Display the number of counts next to the social network icon. Enable/disable the floating bar. Change the shape of the floating bar’s social buttons. Add social identities. Add a “Click to tweet” button in WordPress editor. Google Analytics tracking. Four different Skins. The default, square style. The more futuristic approach, shift style. The friendly approach, pill (rounded corners) style. The eye-catching approach, leaf style (like a leaf in the wind). Display social icons: before content, after content or both. Amazing loading speed. What’s Next? If you like this plugin, then please consider leaving us a rating / review. This plugin is completely free and maintained by WPKube, a WordPress resource site, where you can learn from our free WordPress tutorials like how to choose the right managed WordPress hosting, how to install WordPress, choose the best shared hosting, and more. Our other projects: – MeridianThemes – Beautiful hand-crafted themes for WordPress – Optin Forms – Simple and easy to use plugin for creating optin forms, works with most well know autoresponder services.

View on WordPress.org