Skip to content
OpenAdvisories
Low · 3.4 CVE-2021-36849 EUVD-2021-23425GHSA-h6g6-h7qh-75h9

WordPress Social Media Share Buttons plugin <= 3.8.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Jul 20, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: René Hermenau Product: Social Media Share Buttons | MashShare (WordPress plugin) Category: Web / CMS

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin <= 3.8.1 at WordPress.

Affected products

VendorProductAffectedFixed
René Hermenau Social Media Share Buttons | MashShare (WordPress plugin) <= 3.8.1 – ≤ 3.8.1 —

References