Social Share Icons & Social Share Buttons

Social Share Icons & Social Share Buttons has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 4 of the records (57%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

Every one of the 7 issues recorded for Social Share Icons & Social Share Buttons has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Chloe Chamberland.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Social Share Icons & Social Share Buttons vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

7 records


2026-10-06 00:00	Social Share Icons & Social Share Buttons <= 3.7.5 - Unauthenticated Stored Cross-Site Scripting Social Share Icons & Social Share… <= 3.7.5	`CVE-2026-42697`	7.2 High	William Honnér	Yes
2024-04-29 00:00	Social Share Icons & Social Share Buttons <= 3.6.2 - Missing Authorization to Notice Dismissal Social Share Icons & Social Share… <= 3.6.2	`CVE-2024-32820`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2024-04-10 00:00	Inisev Analyst Module <= Various Versions - Missing Authorization Social Share Icons & Social Share… <= 3.6.1	`CVE-2024-31435`	4.3 Medium	Dhabaleshwar Das	Yes
2023-07-27 00:00	Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function Social Share Icons & Social Share… <= 3.5.7	`CVE-2023-0958`	4.3 Medium	Chloe Chamberland	Yes
2023-07-27 00:00	Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function Social Share Icons & Social Share… <= 3.5.7	`CVE-2023-3977`	4.3 Medium	Chloe Chamberland	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Social Share Icons & Social Share… <= 3.2.7	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2019-02-25 00:00	Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update Social Share Icons & Social Share… < 3.0.4	`N/A`	8.8 High	Anonymous	Yes

Showing 1–7 of 7 reports