Known vulnerabilities in Shariff Wrapper

Shariff provides share buttons that respect the privacy of your visitors and follow the General Data Protection Regulation (GDPR).

7Reported vulnerabilities

9.8Highest CVSS score

4.6.22Latest version

30,000+Active installs

What to do now

Update Shariff Wrapper to 4.6.21 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 15, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-4098	Critical 9.8	1.0%	Before 4.6.14	`4.6.14`	June 20, 2024
CVE-2024-1106	Medium 6.1	0.4%	Before 4.6.10	`4.6.10`	February 27, 2024
CVE-2026-4334	Medium 6.4	0.3%	0 to 4.6.20 (inclusive)	`4.6.21`	May 28, 2026
CVE-2024-2695	Medium 5.4	0.3%	Before 4.6.14	`4.6.14`	June 15, 2024
CVE-2024-1450	Medium 5.4	0.5%	Before 4.6.11	`4.6.11`	March 21, 2024
CVE-2024-0966	Medium 5.4	0.5%	Before 4.6.10	`4.6.10`	March 21, 2024
CVE-2023-6500	Medium 5.4	0.4%	Before 4.6.10	`4.6.10`	March 21, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.