What is CVE-2012-4273?

CVE-2012-4273 is a vulnerability in Ppfeufer 2-Click-Social-Media-Buttons, classified under Cross-site Scripting. Published 2012-08-13.

Is CVE-2012-4273 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Ppfeufer 2-Click-Social-Media-Buttons

CVE-2012-4273

Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2012-08-13 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 4.3 (Medium). Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.058 (92.8th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.058 · newest: 0.058 · change: 0.000

Affected products

Ppfeufer 2-Click-Social-Media-Buttons — versions 0.1, 0.2, 0.3
WordPress

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

plugins.trac.wordpress.org/changeset (Exploit, Patch)
exchange.xforce.ibmcloud.com/vulnerabilities/75518 (vdb-entry)
packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cros… (Exploit)
wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/

Frequently asked questions

What is CVE-2012-4273?: CVE-2012-4273 is a vulnerability in Ppfeufer 2-Click-Social-Media-Buttons, classified under Cross-site Scripting. Published 2012-08-13.
Is CVE-2012-4273 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.