CVE-2026-42697highCWE-79

CVE-2026-42697: high-severity vulnerability in Inisev Social Share Icons & Social Share Buttons

WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability

Published 10 Oct 2026 · Updated 13 Oct 2026

Follow this CVE + Monitor Social Share Icons & Social Share Buttons

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.2%

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus allows Reflected XSS.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.7.5.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected products

Inisev · Social Share Icons & Social Share Buttons

References

https://patchstack.com/database/wordpress/plugin/ultimate-social-media-plus/vulnerability/wordpress-social-share-icons-social-share-buttons-plugin-3-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve