WPUpper Share Buttons

WPUpper Share Buttons has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

Every one of the 3 issues recorded for WPUpper Share Buttons has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. WPUpper Share Buttons is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

5.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPUpper Share Buttons vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2022-3838

WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-02-20 15:01	WPUpper Share Buttons <= 3.51 - Cross-Site Request Forgery to Custom CSS Update WPUpper Share Buttons <= 3.51	`CVE-2024-13883`	4.3 Medium	Noah Stead (TurtleBurg)	Yes
2024-06-03 16:40	WPUpper Share Buttons <= 3.43 - Missing Authorization WPUpper Share Buttons <= 3.43	`CVE-2024-4997`	5.3 Medium	Krzysztof Zając	Yes
2022-11-10 00:00	WPUpper Share Buttons <= 3.42 - Authenticated (Admin+) Stored Cross-Site Scripting WPUpper Share Buttons <= 3.42	`CVE-2022-3838`	5.5 Medium	zhangyunpei	Yes

Showing 1–3 of 3 reports

Latestv3.52

WPUpper Share Buttons

Author

Freitas Victor

4.9(196)

98/100

Last Updated

2025-03-27 (2y ago)

Active Installs

4,000+

Downloads

242,415

Requires WP

6.3+

Requires PHP

7.0.0+

Tested up to

WP 6.7.7

Created

2016-03-11 (11y ago)

Free social share buttons, share to Facebook, WhatsApp, Messenger, Twitter, Reddit and much more. Follow US buttons include with Widgets. If you like the plugin, feel free to rate it (on the right side of this page) or donate. I am very pleased to dedicate myself to this plugin. Thank you so much! 🙂 Adds before, after the contents post or both Create a new table to store the sharing number of posts Store some options with the data that will be used to show, hide, stylize and remove specific buttons. The networks support are: – Facebook; – Twitter; – Linkedin; – Pinterest; – Thumbler; – Whatsapp; – Mailto; – Print Friendly; Telegram; Skype; Viper; – Reddit; – Gmail Thanks Translators who did a great job converting the text of the plugin to their native language. Thank you! Victor Freitas (Brazilian) Victor Freitas (Spanish) Lily Ousborne (Russian) Note: This is very important for all users worldwide. So please contribute your language to the plugin to make it even more useful. Translating validating in “Poedit Editor”.

View on WordPress.org