MashShare – Social Media Share Buttons, Social Share Icons

MashShare – Social Media Share Buttons, Social Share Icons has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2025; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2022 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Missing Authorization.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all MashShare – Social Media Share Buttons, Social Share Icons vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-22319

Social Media Share Buttons | MashShare <= 4.0.47 - Missing Authorization

Read the full analysis

Vulnerability Records

5 records


2025-01-03 00:00	Social Media Share Buttons \| MashShare <= 4.0.47 - Missing Authorization MashShare <= 4.0.47	`CVE-2025-22319`	4.3 Medium	Trương Hữu Phúc (truonghuuphuc)	No
2022-12-23 00:00	Social Media Share Buttons <= 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode MashShare <= 3.8.6	`CVE-2022-4544`	6.4 Medium	István Márton	Yes
2022-08-19 00:00	Social Media Share Buttons <= 3.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting MashShare <= 3.8.3	`N/A`	5.5 Medium	Anonymous	Yes
2022-06-16 15:39	Social Media Share Buttons <= 3.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting MashShare <= 3.8.1	`CVE-2021-36849`	5.5 Medium	Asif Nawaz Minhas	Yes
2015-04-25 00:00	Social Media Share Buttons \| MashShare < 2.3.1 - Information Disclosure MashShare < 2.3.1	`N/A`	5.3 Medium	James Hooker	Yes

Showing 1–5 of 5 reports