PLUGIN SECURITY
Is AddToAny Share Buttons safe?
Share buttons for WordPress including the AddToAny button, Facebook, Bluesky, Mastodon, WhatsApp, Pinterest, Reddit, many more, and follow icons too.
What this plugin does
- Slug:
add-to-any - Author: micropat
- 300000+ active installs
- 94/100 rating (1113 reviews on wordpress.org)
- 19031063 all-time downloads
- On WordPress.org since 2007-03-17
shareshare buttonsshare iconssocialsocial media
Maintenance status
- Latest known version: 1.8.18
- Last updated: 2026-05-22 10:11pm GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
2 known CVEs on file for AddToAny Share Buttons. Reported between 2017 and 2021.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24616 | AddToAny Share Buttons [add-to-any] < 1.7.48 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 1.7.48 | 1.7.48 | 2021-08-10 | ✓ fixed in latest |
| CVE-2021-24568 | AddToAny Share Buttons [add-to-any] < 1.7.46 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.7.46 | 1.7.46 | 2021-08-09 | ✓ fixed in latest |
| — | AddToAny Share Buttons [add-to-any] < 1.7.15 | — | Unknown | < 1.7.15 | 1.7.15 | 2017-08-16 | ✓ fixed in latest |
| — | AddToAny Share Buttons [add-to-any] < 1.7.15 | — | Unknown | < 1.7.15 | 1.7.15 | 2017-08-16 | ✓ fixed in latest |
| — | AddToAny Share Buttons [add-to-any] < 1.7.15 | — | Unknown | < 1.7.15 | 1.7.15 | — | ✓ fixed in latest |
| — | AddToAny Share Buttons <= 1.7.14 - Conditional Host Header Injection | — | Unknown | < 1.7.15 | 1.7.15 | — | ✓ fixed in latest |
How to fix it
Keep AddToAny Share Buttons updated — 1.8.18 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Social Media Share Buttons & Social Sharing Icons — 100000+ active installs — 96/100 (5334) — max PHP 8.4
- Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More — 100000+ active installs — 96/100 (317) — max PHP 8.4
- WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat — 90000+ active installs — 98/100 (144) — max PHP 8.4
- Ocean Social Sharing — 60000+ active installs — 90/100 (11) — max PHP 8.4
- Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds — 40000+ active installs — 96/100 (396) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.