Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-36843 EUVD-2021-23419GHSA-hw2w-x847-8444

WordPress Floating Social Media Icon plugin <= 4.3.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Nov 26, 2021 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Configuration form. Requires high role user like admin.

Affected products

VendorProductAffectedFixed
Acurax Technologies Floating Social Media Icon (WordPress plugin) <= 4.3.5 – ≤ 4.3.5 —

References