WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Easy Social Icons

Upload your own social media icons or choose from font-awesome. Use widget|shortcode to place icons anywhere(sidebar, header, footer, page) in theme.

12Reported vulnerabilities
7.3Highest CVSS score
4.0.2Latest version
20,000+Active installs

What to do now

Update Easy Social Icons to 3.2.5 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: November 9, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-0887 High 7.2 1.3% Before 3.1.4 3.1.4 April 4, 2022
CVE-2015-2084 Medium 6.8 2.6% 1.2.2 and earlier 1.2.3 February 25, 2015
CVE-2021-39322 Medium 6.1 2.3% Before 3.0.9 3.0.9 September 2, 2021
CVE-2022-0840 Medium 4.8 0.6% Before 3.2.1 3.2.1 April 11, 2022
WF-cc4f2fd3-ed6b-4fe4-b300-02b1b35ebb7b High 7.3 — 3.2.0 and earlier 3.2.1 April 11, 2022
WF-feab189a-bd89-461d-b553-f137b8032e94 High 7.2 — 1.2.3.1 and earlier 1.2.4 July 22, 2015
CVE-2023-48336 Medium 6.4 0.4% 3.2.4 and earlier 3.2.5 November 23, 2023
WF-86c3ef76-d4d0-4106-850f-88e9ea176979 Medium 6.1 — 3.1.2 and earlier 3.1.3 September 2, 2021
WF-1f38aca5-0d69-421e-a3f2-d12cd593a88a Medium 6.1 — 3.0.9 and earlier 3.1.0 September 1, 2021
WF-7dfa84ed-0edf-4a75-8ec3-986c3880353c Medium 5.5 — 3.1.4 and earlier 3.2.0 April 11, 2022
WF-cca16945-f230-4d0d-9f40-eabd5bf42e30 Medium 5.5 — 3.2.2 and earlier 3.2.3 April 11, 2022
CVE-2023-33998 Medium 4.3 0.4% 3.2.4 and earlier 3.2.5 November 7, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.