SEGURIDAD DE PLUGINS
Vulnerabilidades conocidas, compatibilidad con PHP y alternativas más seguras para el plugin de WordPress Easy Social Share Buttons for WordPress — verificado contra la base de datos de seguridad local de WP Clinic.
easy-social-share-buttons3shareshare iconssocialsocial mediawidget
4 CVEs conocidos registrados para Easy Social Share Buttons for WordPress. Reportadas entre 2024 y 2025.
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2025-64198 | Easy Social Share Buttons [easy-social-share-buttons3] < 10.7.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Alta 7,1 | < 10.7.1 | 10.7.1 | 2025-10-26 | — |
| CVE-2024-31300 | Easy Social Share Buttons [easy-social-share-buttons3] < 9.5 | Limitación incorrecta de una ruta a un directorio restringido (Path Traversal) | Alta 8,5 | < 9.5 | 9.5 | 2024-04-05 | — |
| CVE-2024-31307 | Easy Social Share Buttons [easy-social-share-buttons3] < 9.5 | Falta de control de autorización | Media 6,3 | < 9.5 | 9.5 | 2024-04-05 | — |
| CVE-2024-30196 | Easy Social Share Buttons < 9.5 - Reflected Cross-Site Scripting | — | Desconocido | < 9.5 | 9.5 | — | — |
The Easy Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 10.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Update the WordPress Easy Social Share Buttons plugin to the latest available version (at least 9.5). Rafie Muhammad (Patchstack) discovered and reported this Local File Inclusion vulnerability in WordPress Easy Social Share Buttons Plugin. This could allow a malicious actor to include local files of the target website and show its output onto the screen. Files which store credentials, such as database credentials, could potentially allow complete database takeover depending on the configuration. This vulnerability has been fixed in version 9.5. This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Easy Social Share Buttons plugin to the latest available version (at least 9.5). Rafie Muhammad (Patchstack) discovered and reported this Broken Access Control vulnerability in WordPress Easy Social Share Buttons Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 9.5. This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Actualiza este plugin a la última versión de wordpress.org — cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en") cuando hay una registrada.
Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.
Ejecuta un escaneo pasivo gratis ahora, o crea una cuenta gratuita e instala el plugin de WP Clinic para un escaneo profundo de toda tu cuenta de hosting y reparación asistida por IA.