CVE-2024-2118

MEDIUM 5.9CVE-2024-2118 · Published 17/04/2024 · updated 17/06/2026

In short

CVE-2024-2118 is a MEDIUM (CVSS 5.9) vulnerability affecting social media share buttons & social sharing icons (inisev).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.8% of all vulnerabilities.
Fix: update to 2.8.9 or later.

Package	Affected versions	Patched versions
social media share buttons & social sharing icons inisev	`< 2.8.9`	`2.8.9`

Description

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

References

wpscan.com/vulnerability/e9d53cb9-a5cb-49f5-bcba-295ae6fa44c3 · Exploit

More vulnerabilities in social media share buttons & social sharing icons

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free