Share This Image
Share This Image has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2026; all 12 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 6 of the records (50%). Other recurring categories include Missing Authorization, Open Redirect.
Every one of the 12 issues recorded for Share This Image has a vendor fix available, so running the current release closes all known holes.
10 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając. Share This Image is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-42641Share This Image <= 2.14 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records
Share This Image
Author
ILLID
Share selected images with customizable content! This plugin adds social sharing icons to each image in your site. Share This Image is a simple and flexible image sharing plugin for WordPress. It gives you great flexibility to promote your content to the most popular social networks/messengers. Plugin home page | Features List | Live DEMO Main Features Supports all most popular social networks/messengers: facebook, x, linkedin, pinterest, tumblr, WhatsApp, Telegram, Messenger, reddit, vkontakte, odnoclassniki. Exact sharing – user will share exactly the same image that he wants. Select what images to share. Share all images of your site or just from several pages. Or just single images that you want. All this is possible! Customize content – fully customizable url, image, title and content that you want to share. Short links – build-in feature to create the short attractive looking version of sharing URL. Powerful Admin Panel – all settings in one page. Build-in shortcode for easier work. Fast – Nothing extra. Just what you need for proper work. Not only images – apply it not only for images but for any block of content with specified data-media attributes. Google Analytics support. Supports all major desktop browsers (IE8, IE9, IE10, Chrome, Firefox, Safari, Opera) and mobile browsers. Premium Features Premium Version New sharing buttons – download image button, link button, embed code, email sharing and Houzz sharing. Advanced content customization and content variables support. Set sources for sharing content and change their priority. Fully customize shared title, description, image and url. Individual buttons content – customize what content to share individually for each sharing button. Set of styling options – predefined icons styles, horizontal or vertical view, offsets by x and y planes. Individual buttons styles – set a unique style for each of your sharing buttons. Buttons positions – choose one of sharing buttons positions: on image, on image (hover), before image, after image. Additional sharing buttons display rules – show or not sharing buttons based on current page and user conditions. New option in admin page to exclude all images from desired pages from sharing. Auto-scroll your visitors to the exact location of the image they came to see. Priority support. Plugin Links Home Page Features List Pricing Docs FAQ
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C