Sharethis

10 CVEs across 7 Sharethis products. Browse Sharethis vulnerabilities, severities, and proof-of-concept exploits.

Sharethis products with known CVEs

ProductCVEs
Sharethis Dashboard For Google Analytics4
Dashboard For Google Analytics2
Simple Share Buttons Adder2
Sharethis1
Sharethis Share Buttons1
Sharethis Share Buttons1
Social Media Feather1
Sharethis CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-12540Medium4.72026-01-07The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.4…
CVE-2025-32282Medium4.32025-04-10Cross-Site Request Forgery (CSRF) vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard fo…
CVE-2025-1507Medium5.32025-03-14The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the h…
CVE-2024-4094Medium5.42024-06-18The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-3648Medium6.42024-05-23The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versi…
CVE-2022-45851Medium5.42024-03-25Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a…
CVE-2021-36848Low3.42022-04-11Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versions <= 2.0.4
CVE-2021-24438Medium6.12021-08-30The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outpu…
CVE-2014-47172014-07-03Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack t…
CVE-2013-34792013-09-05Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of admi…