Plugin icon

Easy Social Icons

easy-social-icons

Vulnerabilities:

10

Last Updated:

November 9, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2023-11-23
Title
Easy Social Icons < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 3.2.5
CVSS
6.4 (medium)
Published
2023-11-07
Title
Easy Social Icons < 3.2.5 - Missing Authorization via cnss_save_ajax_order
Fixed in
Fixed in 3.2.5
CVSS
4.3 (medium)
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
Fixed in
Fixed in 3.2.1
CVSS
2.0 (low)
Published
2022-03-21
Title
Easy Social Icons < 3.2.1 - Unauthenticated Arbitrary Icon Deletion
Fixed in
Fixed in 3.2.1
CVSS
5.3 (medium)
Published
2022-03-15
Title
Easy Social Icons < 3.2.0 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.0
CVSS
3.4 (low)
Published
2022-03-08
Title
Easy Social Icons < 3.1.4 - Admin+ SQL Injection
Fixed in
Fixed in 3.1.4
CVSS
6.8 (medium)
Published
2021-09-02
Title
Easy Social Icons < 3.1.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.1.3
CVSS
8.8 (high)
Published
2021-08-30
Title
Easy Social Icons < 3.0.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.9
CVSS
8.8 (high)
Published
2015-07-22
Title
Easy Social Icons < 1.2.4 - Authenticated SQL Injection
Fixed in
Fixed in 1.2.4
CVSS
n/a
Published
2015-02-19
Title
Easy Social Icons <= 1.2.2 - Stored XSS & CSRF
Fixed in
Fixed in 1.2.3
CVSS
n/a