https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-5602.htmlhttps://patchthecve.com/cve/CVE-2023-5602.htmlWed, 17 Jun 2026 06:48:55 +0000MEDIUM 4.3: The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validation on several functions corresponding to AJAX actions. This makes it possible for unauhttps://patchthecve.com/cve/CVE-2023-5070.htmlhttps://patchthecve.com/cve/CVE-2023-5070.htmlWed, 17 Jun 2026 06:47:28 +0000MEDIUM 6.5: The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that include social media authentication tokens ahttps://patchthecve.com/cve/CVE-2023-41238.htmlhttps://patchthecve.com/cve/CVE-2023-41238.htmlWed, 17 Jun 2026 06:21:17 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.3 versions.https://patchthecve.com/cve/CVE-2023-1166.htmlhttps://patchthecve.com/cve/CVE-2023-1166.htmlWed, 17 Jun 2026 05:27:16 +0000MEDIUM 4.8: The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).