Plugin icon

Social Media Share Buttons & Social Sharing Icons

ultimate-social-media-icons

Vulnerabilities:

15

Last Updated:

September 18, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-09-30
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.2 - Reflected DOM-Based Cross-Site Scripting via URL
Fixed in
Fixed in 3.0.2
CVSS
6.1 (medium)
Published
2026-08-31
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler
Fixed in
Fixed in 3.0.1
CVSS
7.1 (high)
Published
2026-08-31
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title
Fixed in
Fixed in 3.0.1
CVSS
6.8 (medium)
Published
2026-08-20
Title
Social Media Share Buttons & Social Sharing Icons < 3.0.0 - Unauthenticated Stored XSS
Fixed in
Fixed in 3.0.0
CVSS
7.2 (high)
Published
2024-07-06
Title
Social Media & Share Icons < 2.9.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.9.2
CVSS
4.4 (medium)
Published
2024-04-29
Title
Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS
Fixed in
Fixed in 2.9.1
CVSS
3.5 (low)
Published
2024-03-27
Title
Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings
Fixed in
Fixed in 2.8.9
CVSS
3.5 (low)
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Subscriber+ Sensitive Information Exposure
Fixed in
Fixed in 2.8.6
CVSS
6.5 (medium)
Published
2023-10-16
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.6 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 2.8.6
CVSS
4.3 (medium)
Published
2023-08-29
Title
Social Media & Share Icons < 2.8.4 - Reflected XSS
Fixed in
Fixed in 2.8.4
CVSS
7.1 (high)
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Fixed in
Fixed in 2.8.2
CVSS
4.3 (medium)
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Fixed in
Fixed in 2.8.2
CVSS
4.3 (medium)
Published
2023-06-05
Title
Social Media Share Buttons & Social Sharing Icons < 2.8.2 - Admin+ Stored XSS
Fixed in
Fixed in 2.8.2
CVSS
3.5 (low)
Published
2019-03-29
Title
Social Media & Share Icons < 2.2.0 - Multiple Issues
Fixed in
Fixed in 2.2.0
CVSS
n/a
Published
2015-05-30
Title
Social Media & Share Icons <= 1.1.1.11 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.1.1.12
CVSS
n/a