Plugin icon

Share This Image

share-this-image

Vulnerabilities:

13

Last Updated:

May 18, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 2.08
CVSS
7.1 (high)
Published
2026-03-26
Title
Share This Image < 2.13 - Missing Authorization
Fixed in
Fixed in 2.13
CVSS
5.3 (medium)
Published
2026-02-13
Title
Share This Image < 2.15 - Unauthenticated Server-Side Request Forgery
Fixed in
Fixed in 2.15
CVSS
7.2 (high)
Published
2026-01-25
Title
Share This Image < 2.10 - Missing Authorization
Fixed in
Fixed in 2.10
CVSS
5.3 (medium)
Published
2024-09-25
Title
Share This Image < 2.02 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.02
CVSS
6.1 (medium)
Published
2024-09-16
Title
Share This Image < 2.04 - Open Redirect via link Parameter
Fixed in
Fixed in 2.04
CVSS
7.2 (high)
Published
2024-09-04
Title
Share This Image < 2.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode
Fixed in
Fixed in 2.03
CVSS
6.4 (medium)
Published
2024-08-30
Title
Share This Image < 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
Fixed in
Fixed in 2.02
CVSS
6.4 (medium)
Published
2024-04-29
Title
Share This Image < 1.99 - Open Redirect
Fixed in
Fixed in 1.99
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.81
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.67
CVSS
4.3 (medium)
Published
2019-04-30
Title
Share This Image <= 1.19 - Stored XSS
Fixed in
Fixed in 1.20
CVSS
n/a
Published
2017-12-18
Title
Share This Image <= 1.03 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.04
CVSS
6.1 (medium)