CVE-2026-42697: WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. Exploitation requires user interaction, as indicated by the UI:R vector.

Q: Which installations are affected?

WordPress sites using Social Share Icons & Social Share Buttons version 3.7.5 or earlier are affected.

Q: What is the potential impact?

Successful exploitation can execute cross-site scripting in a user’s browser and may affect confidentiality, integrity, and availability at a low level. The CVSS vector indicates the impact can extend beyond the vulnerable component’s security scope.

Published Oct 10, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.

Affected Software

1 affected component

WordPress Social Share Icons & Social Share Buttons<=3.7.5

Event History

Oct 10, 2026

CVE Published

via MITRE·07:35 PM

Data Sourced

via MITRE·07:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior access to the site. Exploitation requires user interaction, as indicated by the UI:R vector.

Which installations are affected?

WordPress sites using Social Share Icons & Social Share Buttons version 3.7.5 or earlier are affected.

What is the potential impact?

Successful exploitation can execute cross-site scripting in a user’s browser and may affect confidentiality, integrity, and availability at a low level. The CVSS vector indicates the impact can extend beyond the vulnerable component’s security scope.

CVE-2026-42697: WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?