CVE-2012-4273: Ppfeufer 2-Click-Social-Media-Buttons

Medium severity, CVSS 4.3. EPSS: 5.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Affected products

• Ppfeufer 2-Click-Social-Media-Buttons: up to and including 0.33; version 0.1 only; version 0.2 only; version 0.3 only; version 0.10 only; version 0.11 only; …

Published 2012-08-13. Last modified 2026-06-16.