Social Share Buttons

Social Share Buttons has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 2 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each. Social Share Buttons is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Social Share Buttons vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-109702

Social Share Buttons <= 1.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-10-15 19:41	Social Share Buttons <= 1.30 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting Social Share Buttons <= 1.30	`CVE-2026-100108`	6.4 Medium	chimerascope	Yes
2026-10-13 12:36	Social Share Buttons <= 1.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting Social Share Buttons <= 1.31	`CVE-2026-109702`	6.4 Medium	Prakrit	No
2024-10-18 00:00	WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting Social Share Buttons <= 1.19	`CVE-2024-9219`	6.1 Medium	Colin Xu	Yes

Showing 1–3 of 3 reports

Latestv1.31

Social Share Buttons

Author

maxfoundry

4.8(28)

96/100

Last Updated

2026-10-14 (14d ago)

Active Installs

1,000+

Downloads

58,135

Requires WP

4.8+

Requires PHP

7.0+

Tested up to

WP 7.1.3

Created

2010-02-26 (17y ago)

Social Share Buttons is the share button addon to MaxButtons. It lets you easily setup and use social buttons on your home page, pages, and posts. Social Share Buttons gets you going in a minute with our beautifully designed presets. The plugin supports all popular networks: Facebook, Twitter, Instagram, Pinterest, Linkedin, YouTube, Pinterest, StumbleUpon, Reddit, Whatsapp, Buffer and more ( PRO version allows more networks, we take requests! ) Features Customize layout. Choose a preset, customize to your liking. Customizable Tweet options. Pick your global #hashtag or customize per post Link (URL) Share options to optimize your sharing and SEO strategy Display options: Hide or Show on different part of your site Layout and Style options Display share count and Total share count PRO Features You get the PRO features for free is you have a license for MaxButtons PRO. Features include: Network editor – Change preferences of your networks. Multiple groups – Have different icons to match the feel of your site More Networks – Add more networks including Xing, Telegram, Etsy, Pocket and more Add your MaxButtons to your Social Icons Define Twitter Hashtags per post or pages MaxButtons is the most used WordPress button, share button and social icon plugin with over 3.5 million downloads and 1000 5 star reviews. Max Foundry also makes the WordPress Gallery plugin MaxGalleria and WordPress Media Folders plugin for real WordPress Media Library folders and Welcome Mat Pro.

View on WordPress.org