Simple Share Buttons Adder

Simple Share Buttons Adder has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2024; all 6 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 6 issues recorded for Simple Share Buttons Adder has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Duncan Stuart. Simple Share Buttons Adder is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Simple Share Buttons Adder vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2014-4717

Simple Share Buttons Adder <= 4.4 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

6 records


2024-05-28 00:00	Simple Share Buttons Adder <= 8.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Share Buttons Adder <= 3.5.0	`CVE-2024-4094`	4.4 Medium	Dmitrii Ignatyev	Yes
2024-02-14 00:00	Simple Share Buttons Adder <= 8.4.11 - Authenticated(Administrator+) Stored Cross-Site Scripting via CSS Settings Simple Share Buttons Adder <= 8.4.11	`CVE-2024-0621`	4.4 Medium	Akbar Kustirama	Yes
2023-04-19 00:00	Simple Share Buttons Adder <= 8.4.6 - Cross-Site Request Forgery Simple Share Buttons Adder <= 8.4.6	`CVE-2022-47178`	4.3 Medium	Muhammad Daffa	Yes
2015-06-02 00:00	Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting Simple Share Buttons Adder < 6.0.1	`CVE-2015-9303`	6.1 Medium	Anonymous	Yes
2014-06-26 00:00	Simple Share Buttons Adder <= 4.4 - Cross-Site Request Forgery Simple Share Buttons Adder < 4.5	`N/A`	8.1 High	Duncan Stuart	Yes
2014-06-26 00:00	Simple Share Buttons Adder <= 4.4 - Cross-Site Request Forgery Simple Share Buttons Adder <= 4.4	`CVE-2014-4717`	8.8 High	Duncan Stuart	Yes

Showing 1–6 of 6 reports

Latestv8.7.0

Simple Share Buttons Adder

Author

Simple Share

4.3(627)

86/100

Last Updated

2026-08-20 (23d ago)

Active Installs

40,000+

Downloads

4,423,106

Requires WP

5.9+

Requires PHP

Tested up to

WP 7.1

Created

2013-03-09 (14y ago)

The Simple Share Buttons Adder does exactly what it says – adds share buttons to all of your posts and pages, simply. The new “Modern Share Buttons” tab are CSS-based settings which allow you more flexibility when it comes to customizing your Share Buttons, Icon and Icon Hover colors! You have the option to use our predefined CSS themes or your own custom CSS. Share to AI assistants as well as social networks. ChatGPT, Claude, Copilot, Gemini, Grok and Perplexity are available in the network lists for the Modern Share Buttons and the Share Bar. Each one opens a new chat in a new tab, prefilled with a prompt asking the assistant to summarize the page being shared. Copilot and Gemini do not accept a prompt in a URL, so for those two the prompt is copied to the visitor’s clipboard and a blank chat is opened for them to paste it into. You can even upload and use your own custom images if you wish! The Simple Share Buttons Adder utilizes features that, as a WordPress user, you will be familiar with. A self-explanatory administration screen will have you showing your Share Buttons on your posts and pages in no time! By downloading and installing this plugin you are agreeing to the Privacy Policy and Terms of Service.

View on WordPress.org