WordPress plugin
AddToAny Share Buttons security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All AddToAny Share Buttons vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.8 | Authenticated Stored Cross-Site Scripting <1.7.48Update to 1.7.48 | CVE-2021-24616 | |
| Medium5.4 | Authenticated Stored Cross-Site Scripting <1.7.46Update to 1.7.46 | CVE-2021-24568 | |
| Medium4.7 | HTTP Host Header Injection ≤1.7.14Update to 1.7.15 | — |
- Medium4.8Authenticated Stored Cross-Site Scripting
<1.7.48Update to 1.7.48
- Medium5.4Authenticated Stored Cross-Site Scripting
<1.7.46Update to 1.7.46
- Medium4.7HTTP Host Header Injection
≤1.7.14Update to 1.7.15
AddToAny Share Buttons: common questions
Does AddToAny Share Buttons have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in AddToAny Share Buttons: 3 medium. None are known to affect version null.
How do I check which version of AddToAny Share Buttons I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent AddToAny Share Buttons vulnerability?
CVE-2021-24616, published Aug 10, 2021: AddToAny Share Buttons <= 1.7.47 - Authenticated Stored Cross-Site Scripting. Severity: Medium (CVSS 4.8).
Is any AddToAny Share Buttons vulnerability listed in CISA KEV?
No. None of the known AddToAny Share Buttons vulnerabilities is currently listed in the CISA KEV catalog.