CVE-2021-36849: Social Media Share Buttons Project Social Media Share Buttons

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in René Hermenau's Social Media Share Buttons plugin <= 3.8.1 at WordPress.

Affected products

• Social Media Share Buttons Project Social Media Share Buttons: up to and including 3.8.1

Published 2022-07-20. Last modified 2026-06-17.