CVEs we hold for Social

Records whose assigning authority named Social as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-77001Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication BypassUnknown Social Login & Sharing buttons with Analytics By…

CVE-2026-41461SocialEngine <= 7.8.0 Blind SSRF via /core/link/previewSocialEngine

CVE-2026-41460SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberallSocialEngine

CVE-2026-19723Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share HandlerUnknown Social Media Share Buttons & Social Sharing Icons

CVE-2026-19719Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post TitleUnknown Social Media Share Buttons & Social Sharing Icons

CVE-2026-1923Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via idsocialrocket Social Rocket – Social Sharing Plugin

CVE-2026-13142Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute ForceUnknown Social Login, Passkeys, Magic Link & Email OTP

CVE-2025-49343WordPress Social Profilr plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilitysocialprofilr Social Profilr

CVE-2025-32131WordPress Social Intents plugin <= 1.6.19 - Cross Site Scripting (XSS) Vulnerabilitysocialintents Social Intents

CVE-2025-25161WordPress WP Find Your Nearest Plugin <= 0.3.1 - CSRF to Settings Change vulnerabilitySocialEvolution WP Find Your Nearest

CVE-2025-14846SocialChamp with WordPress <= 1.3.5 - Cross-Site Request Forgery to Plugin Settings Updatesocialchampio Auto Post to Social Media from Social Champ

CVE-2025-12413Social Media WPCF7 Stop Words <= 1.1.3 - Cross-Site Request Forgery to Settings Updatesocialmedialtd WPCF7 Stop words

CVE-2025-0717Social Slider Feed < 2.2.9 - Admin+ Stored XSSUnknown Social Slider Feed

CVE-2024-9702Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesocialrocket Social Rocket – Social Sharing Plugin

CVE-2024-9697Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Updatesocialrocket Social Rocket – Social Sharing Plugin

CVE-2024-53757WordPress WP Find Your Nearest plugin <= 0.3.1 - Cross Site Scripting (XSS) vulnerabilitySocialEvolution WP Find Your Nearest

CVE-2024-4924Sassy social share < 3.3.63 Admin+ Stored Cross-Site scriptingUnknown Social Sharing Plugin

CVE-2024-4005Social Pixel <= 2.1 - Admin+ Stored XSSUnknown Social Pixel

CVE-2024-37258WordPress Social Rocket plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilitySocial Rocket

CVE-2024-32820WordPress Social Share Icons & Social Share Buttons plugin <= 3.6.2 - Broken Access Control lead to Notice Dismissal…Social Share Buttons

CVE-2024-32805WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerabilitySocial Snap

CVE-2024-2872Swift Framework < 2024.04.30 - Contributor+ Stored XSSUnknown socialdriver-framework

CVE-2024-2870Swift Framework < 2024.04.30 - Reflected XSSUnknown socialdriver-framework

CVE-2024-2836Super Socializer < 7.13.64 - Editor+ Stored XSSUnknown Social Share, Social Login and Social Comments…

CVE-2024-2721WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerabilitySocial Media Share Buttons

CVE-2024-2697Swift Framework < 2024.0.0 - Contributor+ Stored XSS via ShortcodeUnknown socialdriver-framework

CVE-2024-2696Swift Framework < 2024.04.30 - Admin+ Stored XSS via SettingsUnknown socialdriver-framework

CVE-2024-2189Social Icons Widget & Block < 4.2.18 - Admin+ Stored XSSUnknown Social Icons Widget & Block by WPZOOM

CVE-2024-2159Sassy Social Share < 3.3.61 - Contributor+ Stored XSSUnknown Social Sharing Plugin

CVE-2024-2118Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settingsUnknown Social Media Share Buttons & Social Sharing Icons

CVE-2024-13615Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSSUnknown Social Share Buttons, Social Sharing Icons, Click…

CVE-2024-13117Social Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path TraversalUnknown Social Share Buttons for WordPress

CVE-2024-12807Social Share Buttons for WordPress <= 2.7 - Admin+ Stored XSSUnknown Social Share Buttons for WordPress

CVE-2024-11189Social Share And Social Locker – ARSocial < 1.4.2 - Admin+ Stored XSSUnknown Social Share And Social Locker

CVE-2024-10362Social Media Share Buttons < 2.9.0 - Admin+ Stored XSSUnknown Social Media Share Buttons & Social Sharing Icons

CVE-2024-10149Social Slider Feed < 2.2.9 - Admin+ Stored XSS via WidgetsUnknown Social Slider Feed

CVE-2024-0974Social Media Widget < 4.0.9 - Admin+ Stored XSSUnknown Social Media Widget

CVE-2023-49861WordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerabilitysocialmediafeather Social Media Feather

CVE-2023-4826Socialdriver < 2024 - Prototype Pollution to XSSUnknown socialdriver

CVE-2023-38514WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerabilitySocial Share Buttons

CVE-2023-2779Super Socializer < 7.13.52 - Reflected XSSUnknown Social Share, Social Login and Social Comments…

CVE-2023-0177Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSSUnknown Social Like Box and Page by WpDevArt

CVE-2022-4835Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via ShortcodeUnknown Social Sharing Toolkit

CVE-2022-4544MashShare < 3.8.7 - Contributor+ Stored XSSUnknown Social Media Share Buttons | MashShare

CVE-2022-4484Super Socializer < 7.13.44 - Contributor+ Stored XSSUnknown Social Share, Social Login and Social Comments…

CVE-2022-4451Sassy Social Share < 3.3.45 - Contributor+ Stored XSSUnknown Social Sharing Plugin

CVE-2022-38063WordPress Social Login WP Plugin <= 5.0.0.0 is vulnerable to Cross Site Request Forgery (CSRF)Social Login WP

CVE-2022-3136Social Rocket < 1.3.3 - Admin+ Stored Cross-Site ScriptingUnknown Social Rocket – Social Sharing Plugin

CVE-2022-1653Social Share Buttons by Supsystic < 2.2.4 - Multiple CSRFUnknown Social Share Buttons by Supsystic

CVE-2022-1418Social Stickers <= 2.2.9 - Stored Cross-Site Scripting via CSRFUnknown Social Stickers

CVE-2022-0876Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site ScriptingUnknown Social comments by WpDevArt

CVE-2021-36848WordPress Social Media Feather plugin <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitySocialmediafeather Social Media Feather (WordPress plugin)

CVE-2021-24987Super Socializer < 7.13.30 - Reflected Cross-Site ScriptingUnknown Social Share, Social Login and Social Comments…

CVE-2021-24746Sassy Social Share < 3.3.40 - Reflected Cross-Site ScriptingUnknown Social Sharing Plugin – Sassy Social Share

CVE-2021-24411Social Tape <= 1.0 - CSRF to Stored XSSUnknown Social Tape

CVE-2021-24196Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown Social Slider Widget

CVE-2020-5611no title heldSocial Sharing Plugin

57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.