Social Media Share Buttons & Social Sharing Icons

Social Media Share Buttons & Social Sharing Icons has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 17 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 7 disclosures.

The most common weakness is Cross-Site Scripting, behind 10 of the records (59%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 17 issues recorded for Social Media Share Buttons & Social Sharing Icons has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (2) reported by Chloe Chamberland. Social Media Share Buttons & Social Sharing Icons is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

01234567891019.09.2014Today30.05.20156.4Social Media Share Buttons & Social Sharing Icons < 1.1.1.12 - Authenticated Stored Cross-Site Scripting CVSS 6.4 · 30.05.201520.07.20157.3Social Media Share Buttons & Social Sharing Icons <= 1.2.1 - Unspecified Vulnerabilities CVSS 7.3 · 20.07.201528.06.20165.4Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion CVSS 5.4 · 28.06.201627.03.20196.1Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting CVSS 6.1 · 27.03.201902.06.20234.3Social Media & Share Icons <= 2.8.1 - Missing Authorization via handle_installation CVSS 4.3 · 02.06.202305.06.20234.4Social Media Share Buttons & Social Sharing Icons <= 2.8.1 - Authenticated(Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 05.06.202327.07.20234.3Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function CVSS 4.3 · 27.07.20234.3Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function CVSS 4.3 · 27.07.202329.08.20236.1Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting CVSS 6.1 · 29.08.202316.10.20236.5Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure CVSS 6.5 · 16.10.20234.3Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery CVSS 4.3 · 16.10.202327.03.20244.4Social Media Share Buttons <= 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 27.03.202406.07.20244.4Social Media & Share Icons <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 06.07.202431.10.20244.4Social Media Share Buttons & Social Sharing Icons <= 2.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 31.10.202420.08.20267.2Social Media Share Buttons & Social Sharing Icons <= 2.9.9 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 20.08.202602.09.20266.4Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 02.09.202603.09.20266.1Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected Cross-Site Scripting CVSS 6.1 · 03.09.2026

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all Social Media Share Buttons & Social Sharing Icons vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3

Social Media Share Buttons & Social Sharing Icons <= 1.2.1 - Unspecified Vulnerabilities

Read the full analysis

Vulnerability Records

17 records
2026-09-03 00:00CVE-2026-19723
6.1
Medium
Mohammed Abd AlrahmanYes
2026-09-02 00:00CVE-2026-19719
6.4
Medium
Mohammed Abd AlrahmanYes
2026-08-20 00:00CVE-2026-66623
7.2
High
BondsYes
2024-10-31 00:00CVE-2024-10362
4.4
Medium
Krugov ArtyomYes
2024-07-06 00:00CVE-2024-37552
4.4
Medium
Joshua ChanYes
2024-03-27 00:00CVE-2024-2118
4.4
Medium
Dmitrii IgnatyevYes
2023-10-16 00:00CVE-2023-5070
6.5
Medium
Marco WotschkaYes
2023-10-16 00:00CVE-2023-5602
4.3
Medium
Marco WotschkaYes
2023-08-29 00:00CVE-2023-41238
6.1
Medium
R3N0Yes
2023-07-27 00:00CVE-2023-3977
4.3
Medium
Chloe ChamberlandYes
Showing 1–10 of 17 reports
Social Media Share Buttons & Social Sharing Icons banner
Latestv3.0.1

Social Media Share Buttons & Social Sharing Icons

Inisev

Author

Inisev

4.8(5,333)
96/100
Last Updated
2026-08-25 (19d ago)
Active Installs
100,000+
Downloads
12,508,101
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2014-09-19 (12y ago)

Try it out on your free dummy site: Click here => https://tastewp.com/plugins/ultimate-social-media-icons (this trick works for all plugins – just replace “wordpress” with “tastewp” in the plugin’s WP repo URL) Social media plugin which let’s you add share icons for RSS, Email, Facebook, Twitter, LinkedIn, Pinterest, Instagram, Youtube, &#8216;Share’ (covering 200+ other social media platforms) and upload custom share icons of your choice. This free plugin has a lot to offer. Even more can be found in the Premium Plugin, please watch this short video: See all features of the Premium plugin. The free social media plugin includes the following features: Pick from 16 different designs for your social media share icons Give several actions to one social media share icon (e.g. your facebook share icon can lead visitors to your Facebook page, and also give visitors the opportunity to like your page) Decide to give your social media icons an animation (e.g. automatic shuffling, mouse-over effects) to make your visitors aware of the share icons, increasing the chance that they follow/share your blog Make your social media icons &#8216;float’ or &#8216;sticky’ Allow visitors to subscribe to your blog by Email Add &#8216;counts’ to your social media buttons Decide to display a pop-up (on all or only on selected pages) asking people to follow/share you via your social media icons Decide to display sharing-buttons and social media icons at the end of every post Select from many other customization features for your socialmedia icons! For GDPR compliance, please have a look at our Social Media GDPR Compliance page. The social media plugin is very easy to use as it takes you through all the steps: Step 1: Choose which social media icons you want to display Step 2: Define what actions your social media icons should perform Step 3: Pick design & animation options for your social media icons Step 4: Add counts to your social media icons (optional) Step 5: Select from various other social share options, e.g. make your social media icons &#8216;float’ Step 6: Add sharing/linking icons next to each blog post (optional) Step 7: Add a customized pop-up asking people to follow or share (optional) Step 8: Add a subscription form on your site (optional) In case of issues or questions please ask in the Support forum. We hope you enjoy the free social media plugin! New premium social share plugin We released a premium social share plugin with many more exciting features: Many more social networks supported, including Snapchat share buttons, Whatsapp share buttons, Yummly share buttons, Phone button, Yelp share buttons, Soundcloud share buttons, Skype share buttons Flickr share buttons, Blogger share buttons, Reddit share buttons, Vimeo share buttons, Tumblr share buttons, Xing share buttons, Xhenta, Vkontakte share buttons (VK), Telegram share buttons, Amazon share buttons, Goodreads share buttons, Angies list share buttons, Steam share buttons, Twitch share buttons, Spotify share buttons, Odnoklassniki share buttons (OK), Buffer share buttons, Weibo share buttons, Pocket share buttons, Meneame share buttons, Frype share buttons, LiveJournal share buttons, Patreon share buttons, Dloky share buttons, Discord share buttons, Github share buttons, WordPress buttons, Etsy share buttons, Better Business Bureau share buttons, Digg share buttons, Delicious share buttons, Print share buttons, and many other share buttons! More design styles to make your social share icons look really cool & matching the design of your website Themed design styles, e.g. if you have a website about cats you can pick from social media logos which look like cats etc. Better social sharing and following features, e.g. you can define the Tweet-texts better (e.g. pull the post titles into your Tweets automatically), let people follow you on Facebook directly without leaving your site etc. Place the social icons on specific pages, i.e. you can define on which pages the icons to the social media sites should not show Position the social icons by anchor and margins, i.e. you can define the margins where your share icons should be displayed (from top/bottom/left/right), and then have them floating, or stick, still visible when user scrolls down or not etc. Optimized for mobile – you can define separate selections for your social network icons for mobile More functions for email icon, such as Share (by email), Contact you, Link to a certain page etc. Social media counters optimized to encourage more social media sharing from your visitors More pop up options which contain your social media buttons, e.g. define a limit to how often the pop-up is shown to the same user, show pop-up only when people try to leave your website etc. Friendly support in case you’re stuck Many more settings and options for your social media network icons Have a look at the Premium Plugin features

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C