Simplesharebuttons

simplesharebuttons

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Simple Share Buttons Adder

simple_share_buttons_adder

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-0621 1Simplesharebuttons 1Simple Share Buttons Adder Jun 17, 2026 Feb 29, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 The Simple Share Buttons Adder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.4.11 due to insufficient input sanitization and output escaping....Show more The Simple Share Buttons Adder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.4.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.Show less
CVE-2022-47178 1Simplesharebuttons 1Simple Share Buttons Adder Jun 17, 2026 May 25, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in Simple Share Buttons Simple Share Buttons Adder plugin <= 8.4.7 versions.
CVE-2015-9303 1Simplesharebuttons 1Simple Share Buttons Adder Nov 21, 2024 Aug 12, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.