Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-36839 EUVD-2021-23415GHSA-pjp7-ffv7-qj9m

WordPress Social Media Follow Buttons Bar plugin <= 4.73 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 30, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Follow Buttons Bar plugin <= 4.73 at WordPress.

Affected products

VendorProductAffectedFixed
Space X-Chimp Social Media Follow Buttons Bar (WordPress plugin) <= 4.73 – ≤ 4.73 —

References