Skip to content
OpenAdvisories
High · 7.1 CVE-2025-64198 EUVD-2025-38056GHSA-jgfp-mcxc-wwr9

WordPress Easy Social Share Buttons plugin < 10.7.1 - Cross Site Scripting (XSS) vulnerability

Published Nov 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: appscreo Product: Easy Social Share Buttons

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through < 10.7.1.

Affected products

VendorProductAffectedFixed
appscreo Easy Social Share Buttons ≤ 10.7.1 —

References