CVE-2021-36843: Acurax Floating Social Media Icon

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Configuration form. Requires high role user like admin.

Affected products

• Acurax Floating Social Media Icon: up to and including 4.3.5

Published 2021-11-26. Last modified 2026-06-17.