Social Media Share Buttons & Social Sharing Icons

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Social Media Share Buttons & Social Sharing Icons

Information

Software Type Plugin
Software Slug ultimate-social-media-icons (view on wordpress.org)
Software Status Active
Software Author socialdude
Software Website ultimatelysocial.com
Software Downloads 10,562,147
Software Active Installs 100,000
Software Record Last Updated September 30, 2023

9 vulnerabilities

Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting
6.1
CVE-2023-41238
Aug 29, 2023
Researcher: Vladislav Pokrovsky
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
4.3
CVE-2023-3977
Jul 27, 2023
Researcher: Chloe Chamberland
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
4.3
CVE-2023-0958
Jul 27, 2023
Researcher: Chloe Chamberland
Social Media Share Buttons & Social Sharing Icons <= 2.8.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-1166
Jun 5, 2023
Researcher: Mohamed Selim
Social Media & Share Icons <= 2.8.1 - Missing Authorization via handle_installation
4.3
CVE-2023-34009
Jun 2, 2023
Researcher: Lana Codes
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Mar 27, 2019
Researchers:
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion
5.4
CVE ID Unknown
Jun 28, 2016
Researchers:
Social Media Share Buttons & Social Sharing Icons <= 1.2.1 - Unspecified Vulnerabilities
7.3
CVE ID Unknown
Jul 20, 2015
Researchers:
Social Media Share Buttons & Social Sharing Icons < 1.1.1.12 - Authenticated Stored Cross-Site Scripting
6.4
CVE ID Unknown
May 30, 2015
Researcher: James Hooker
Title CVE ID CVSS Researchers Date
Social Media & Share Icons <= 2.8.3 - Reflected Cross-Site Scripting CVE-2023-41238 6.1 Vladislav Pokrovsky August 29, 2023
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function CVE-2023-3977 4.3 Chloe Chamberland July 27, 2023
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function CVE-2023-0958 4.3 Chloe Chamberland July 27, 2023
Social Media Share Buttons & Social Sharing Icons <= 2.8.1 - Authenticated(Administrator+) Stored Cross-Site Scripting CVE-2023-1166 4.4 Mohamed Selim June 5, 2023
Social Media & Share Icons <= 2.8.1 - Missing Authorization via handle_installation CVE-2023-34009 4.3 Lana Codes June 2, 2023
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting 6.1 March 27, 2019
Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion 5.4 June 28, 2016
Social Media Share Buttons & Social Sharing Icons <= 1.2.1 - Unspecified Vulnerabilities 7.3 July 20, 2015
Social Media Share Buttons & Social Sharing Icons < 1.1.1.12 - Authenticated Stored Cross-Site Scripting 6.4 James Hooker May 30, 2015

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation