ShareThis Share Buttons

ShareThis Share Buttons has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for ShareThis Share Buttons has a vendor fix available, so running the current release closes it.

All of these findings were reported by Krzysztof Zając. ShareThis Share Buttons is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all ShareThis Share Buttons vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-3648

ShareThis Share Buttons <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via sharethis-inline-buttons Shortcode

Read the full analysis

Vulnerability Records

1 records
ShareThis Share Buttons banner
Latestv2.3.12

ShareThis Share Buttons

ShareThis

Author

ShareThis

3.5(26)
70/100
Last Updated
2026-08-20 (23d ago)
Active Installs
10,000+
Downloads
648,966
Requires WP
5.5+
Requires PHP
0+
Tested up to
WP 7.1
Created
2017-08-21 (9y ago)

ShareThis Share Buttons makes it easy for visitors to share your content across the world’s most popular social networks and AI assistants. Boost traffic, improve engagement, and expand the reach of your posts, pages, products, and content with beautifully designed social sharing buttons that are easy to install and customize. The plugin is lightweight, mobile responsive, GDPR friendly, and optimized for performance with asynchronous loading that will not slow down your website. No coding required. Key Features One-click sharing across 40+ social networks AI assistant buttons for ChatGPT, Claude, Copilot, Gemini, Grok, and Perplexity Sticky and inline share button layouts Lightweight asynchronous loading for fast performance Mobile responsive design Gutenberg compatible Custom colors, alignment, and sizing options Multilingual support with 15+ languages Per-page and per-post controls Shortcodes and PHP integration GDPR compliance options included Supported Networks Share content across major platforms including: Facebook Twitter / X WhatsApp Pinterest LinkedIn Reddit Threads Bluesky Mastodon Messenger Snapchat Telegram Email And many more AI Assistant Buttons Readers increasingly turn to AI assistants to summarize, translate, and ask questions about what they read. ShareThis now includes share buttons for the major AI assistants so visitors can open your page in the assistant of their choice: ChatGPT Claude Copilot Gemini Grok Perplexity AI assistant buttons work exactly like the social network buttons. Add them to your inline or sticky layouts, reorder them alongside your other networks, and apply your own colors and sizing. These buttons are turned off by default. Enable the ones you want from the network list on the Inline or Sticky Share Buttons settings screen. Inline Share Buttons Inline Share Buttons can be displayed directly inside your content for maximum visibility and engagement. Features include: Display buttons above or below content Adjustable spacing and margins Alignment controls Custom button sizes and colors Gutenberg block support Shortcode support PHP template snippets Enable or disable buttons on individual posts and pages Sticky Share Buttons Sticky Share Buttons stay visible as visitors scroll through your content. Features include: Sticky sidebar positioning Enable on posts, pages, archives, products, and custom post types Category and page exclusions Responsive mobile behavior Per-page display controls Searchable page exclusion settings Performance Focused ShareThis Share Buttons are built with performance in mind. The plugin loads asynchronously to reduce render blocking and improve page speed performance while maintaining a seamless user experience. Existing ShareThis User? Already using ShareThis on your website? If you previously added ShareThis manually using embedded JavaScript, remember to remove any hardcoded scripts and inline share button containers after activating the plugin. WordPress Features Gutenberg block support Widget support Shortcodes for manual placement PHP template integration Per-page enable and disable controls Custom post type support Multi-language support GDPR controls Mobile responsive layouts Privacy By creating a ShareThis account, you agree to the ShareThis Terms of Use: https://sharethis.com/publisher-terms-of-use/ ShareThis may collect interaction data related to button engagement and usage. Read the ShareThis Privacy Policy here: https://www.sharethis.com/privacy/ Need help? Visit the WordPress support forum and our team will be happy to assist you.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C