Skip to content
OpenAdvisories
Medium · 6.5 Public exploit CVE-2023-5070 EUVD-2023-57412GHSA-g8cv-hhj5-2rjx

Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure

Published Oct 20, 2023 · Updated Apr 8, 2026 · Assigned by Wordfence

Vendor: Inisev Product: Social Media Share Buttons & Social Sharing Icons Category: Web / CMS

Description

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that include social media authentication tokens and secrets as well as app passwords.

Affected products

VendorProductAffectedFixed
inisev Social Media Share Buttons & Social Sharing Icons ≤ 2.8.5 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References