Skip to content

CVE PROGRAM SOURCE RECORD3.4 Low

CVE-2021-36849

WordPress Social Media Share Buttons plugin <= 3.8.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-07-20
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin <= 3.8.1 at WordPress.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

René Hermenau Social Media Share Buttons | MashShare (WordPress plugin)

<= 3.8.1 to ≤ 3.8.1affected

References