CVE-2012-4273: Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before...

Security readout for executives and security teams

This is an old WordPress plugin XSS issue. Sites using 2 Click Social Media Buttons before version 0.34 could let an attacker inject script or HTML through the Xing sharing URL parameter, potentially affecting visitors or administrators who load a crafted page or request. Exposure is most likely on legacy WordPress installations that still run the 2 Click Social Media Buttons plugin below version 0.34. Current exposure depends on whether the plugin is installed, enabled, reachable, and still using the vulnerable Xing handling code. Prioritize as a legacy internet-facing WordPress hygiene issue. It is not marked as actively exploited in the provided sources, but exposed outdated plugins can create visitor and admin session risk and should be removed or updated during routine remediation. Mitigation focus: Upgrade 2 Click Social Media Buttons to version 0.34 or later if available.; Remove or replace the plugin if it is obsolete or no longer maintained.; Check WordPress plugin changelog and vendor guidance for supported remediation details..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.