Wp Share Buttons Analytics By Getsocial Vulnerabilities

The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauth...

CVSS:

4.3

Affected:

up to 4.5

Fix:

No patched version reported

Disclosed:

Apr 4, 2025

CVE-2025-32239 on NVD →

[en] Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Social Share Buttons & Analytics Plugin – GetSocial.io: from n/a through 4.5.

Affected:

up to 4.5

Fix:

No patched version reported

Disclosed:

Apr 4, 2025

CVE-2025-32239 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Getsocial, S.A. Social Share Buttons & Analytics Plugin – GetSocial.Io allows Stored XSS.This issue affects Social Share Buttons & Analytics Plugin – GetSocial.Io: from n/a through 4.3.12.

Affected:

up to 4.4

Fixed in:

4.4

Disclosed:

Dec 15, 2023

CVE-2023-49189 on NVD →

The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-...

CVSS:

4.4

Affected:

up to 4.3.12

Fixed in:

4.4

Disclosed:

Nov 29, 2023

CVE-2023-49189 on NVD →