CVE-2023-5070
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
MEDIUM 6.5EPSS 1.4%
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that include social media authentication tokens and secrets as well as app passwords.
- Affected
- inisev · Social Media Share Buttons & Social Sharing Icons
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 1.43% chance of exploitation in the next 30 days, 73rd percentile
- Published
- 2023-10-20
- Updated
- 2026-04-08
Proof-of-concept exploits (1)
- RandomRobbieBF/CVE-2023-50700★ · 2023-10-17
Security advisories
- https://www.wordfence.com/threat-intel/vulnerabilities/id/e9e43c5b-a094-44ab-a8a3-52d437f…
- https://plugins.trac.wordpress.org/changeset/2975574/ultimate-social-media-icons/tags/2.8…