Social Rocket – Social Sharing Plugin
Social Rocket – Social Sharing Plugin has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2020 and 2026; all 7 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 7 issues recorded for Social Rocket – Social Sharing Plugin has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, most of them (2) reported by Akio Furui. Social Rocket – Social Sharing Plugin is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
Social Rocket <= 1.2.9 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Social Rocket – Social Sharing Plugin
Author
socialrocket
Out of this world social sharing shouldn’t be rocket science. Social Rocket adds fully-customizable social sharing buttons to your site. It’s easy to use, and packed with many additional social networking features we’re sure you’ll love. Features Easily add buttons for Facebook, X (formerly Twitter), Pinterest, LinkedIn, Mix, Reddit, Buffer, Email, and Print Inline sharing buttons integrate seamlessly with your content Floating buttons stay fixed edge of the screen Buttons can be inserted automatically at the location you choose Or use a shortcode to insert buttons anywhere you need them Specify placement settings for all content, specific types of content, or specific posts/pages Full support for all posts, pages, CPTs, and even archives! Click to Tweet shortcode/block Set custom sharing description, image, and more for individual posts, pages or archives Import/export settings Backup/restore your data on demand Compatible with both Gutenberg and Classic Editor Compatible with WP Multisite Compatible with WooCommerce Compatible with Easy Digital Downloads Translation ready Lots of hooks and filters available for further customization Pro Features Social Rocket Pro adds many more features to the core Social Rocket plugin, including: More networks: Digg, Evernote, Flipboard, Hacker News, Pocket, Telegram, Tumblr, Vkontakte, WhatsApp, Yummly, and more being added soon! “More” button allows you to hide certain buttons and reveal on click Separate settings for Mobile vs Desktop — customize the appearance and placement of your buttons for different screens Link shortening via Bitly Share Count Rescue — get back shares from previous URLs (for example if you changed domains, http to https, or any other changes) Optionally show custom Pinterest image on your posts/pages And much more! We also offer a Migrator extension that allows you to easily transfer your settings and data from other social sharing plugins including Mashshare, Social Pug, and Social Warfare. Social Rocket Migrator extension Visit our website to find out more Documentation | Support | Extensions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C