WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
share-button
Published
2024-10-18
Title
WordPress Social Share Buttons < 1.20 - Reflected Cross-Site Scripting
Slug
share-button
Published
2026-10-13
Title
Social Share Buttons <= 1.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
share-button
Published
2026-10-15
Title
Social Share Buttons < 1.31 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'share_url' Network Setting
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Admin+ Stored XSS
Slug
share-buttons
Published
2025-01-06
Title
Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path Traversal
Slug
share-on-diaspora
Published
2017-08-23
Title
Share On Diaspora < 0.7.2 - XSS
Slug
share-one-drive
Published
2021-12-13
Title
Share One Drive < 1.15.3 - Reflected Cross-Site Scripting
Slug
share-one-drive
Published
2026-09-17
Title
WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
Slug
share-print-pdf-woocommerce
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
share-print-pdf-woocommerce
Published
2025-12-23
Title
Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization
Slug
share-this
Published
2014-08-01
Title
ShareThis 7.0.3 - Setting Manipulation CSRF
Slug
share-this-image
Published
2017-12-18
Title
Share This Image <= 1.03 - Cross-Site Scripting (XSS)
Slug
share-this-image
Published
2019-04-30
Title
Share This Image <= 1.19 - Stored XSS
Slug
share-this-image
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
share-this-image
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
share-this-image
Published
2024-04-29
Title
Share This Image < 1.99 - Open Redirect
Slug
share-this-image
Published
2024-08-30
Title
Share This Image < 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
Slug
share-this-image
Published
2024-09-04
Title
Share This Image < 2.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode
Slug
share-this-image
Published
2024-09-16
Title
Share This Image < 2.04 - Open Redirect via link Parameter
Slug
share-this-image
Published
2024-09-25
Title
Share This Image < 2.02 - Reflected Cross-Site Scripting
Slug
share-this-image
Published
2026-01-25
Title
Share This Image < 2.10 - Missing Authorization
Slug
share-this-image
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
share-this-image
Published
2026-03-26
Title
Share This Image < 2.13 - Missing Authorization
Slug
share-this-image
Published
2026-02-13
Title
Share This Image < 2.15 - Unauthenticated Server-Side Request Forgery
Slug
share-to-google-classroom
Published
2025-11-10
Title
Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode