Known vulnerabilities in Social Sharing Plugin – Sassy Social Share

The Simplest and Optimized Social Share buttons. Facebook, X, Reddit, Pinterest, Whatsapp, Grok, ChatGPT, Gab, Gettr and over 100 more.

11Reported vulnerabilities

8.8Highest CVSS score

3.3.79Latest version

100,000+Active installs

What to do now

Update Social Sharing Plugin – Sassy Social Share to 3.3.76 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: September 15, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-4971	Medium 6.1	16.2%	3.3.3 and earlier	`3.3.4`	October 16, 2024
CVE-2021-39321	High 8.8	2.0%	3.3.23 to 3.3.23 (inclusive)	`3.3.24`	October 21, 2021
CVE-2021-24746	Medium 6.1	2.2%	Before 3.3.40	`3.3.40`	March 28, 2022
CVE-2024-4924	Medium 6.1	0.5%	Before 3.6.3	`3.6.3`	June 12, 2024
CVE-2022-4451	Medium 5.4	0.5%	Before 3.3.45	`3.3.45`	January 16, 2023
CVE-2024-2159	Medium 4.7	0.5%	Before 3.3.61	`3.3.61`	April 26, 2024
CVE-2024-1448	Medium 6.4	0.5%	3.3.56 and earlier	`3.3.57`	February 29, 2024
CVE-2024-11252	Medium 6.1	0.9%	Before 3.3.70	`3.3.70`	November 30, 2024
CVE-2025-5528	Medium 6.1	0.2%	Before 3.3.76	`3.3.76`	June 7, 2025
CVE-2025-39404	Medium 6.1	0.3%	3.3.73 and earlier	`3.3.74`	April 17, 2025
CVE-2024-1989	Medium 5.4	0.5%	Before 3.3.59	`3.3.59`	March 6, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.