Sharethis
7 CVEs across 7 Sharethis products. Browse Sharethis vulnerabilities, severities, and proof-of-concept exploits.
Sharethis products with known CVEs
Sharethis CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-12540 | Medium | 4.7 | 2026-01-07 | The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.4… |
CVE-2025-32282 | Medium | 4.3 | 2025-04-10 | Cross-Site Request Forgery (CSRF) vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard fo… |
CVE-2025-1507 | Medium | 5.3 | 2025-03-14 | The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the h… |
CVE-2024-4094 | Medium | 5.4 | 2024-06-18 | The Simple Share Buttons Adder WordPress plugin before 8.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as… |
CVE-2024-3648 | Medium | 6.4 | 2024-05-23 | The ShareThis Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sharethis-inline-button' shortcode in all versi… |
CVE-2022-45851 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a… |
CVE-2021-36848 | Low | 3.4 | 2022-04-11 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versions <= 2.0.4 |
CVE-2021-24438 | Medium | 6.1 | 2021-08-30 | The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outpu… |
CVE-2014-4717 | | | 2014-07-03 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack t… |
CVE-2013-3479 | | | 2013-09-05 | Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of admi… |