CVE-2026-89047

Name of the Vulnerable Software and Affected Versions Social Media Share Buttons & Social Sharing Icons versions prior to 3.0.2

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting (XSS), a technique where malicious scripts are injected into a web page and executed in the victim's browser. This occurs via the URL when a user with a mobile user-agent clicks the WeChat share icon, triggering automatic script execution once the dialog opens.

Recommendations Update the plugin to version 3.0.2 or later.