CVE-2014-4717: Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Share Buttons Adder plugin before...

Security readout for executives and security teams

CVE-2014-4717 affects the Simple Share Buttons Adder WordPress plugin before version 4.5. If an administrator was tricked into making a malicious request while logged in, attacker-controlled script could be stored and later shown on site pages. This is mainly a risk for WordPress sites still running the old plugin version. Exposure is limited to WordPress installations using Simple Share Buttons Adder before 4.5. Risk depends on whether an authenticated administrator can be induced to trigger a forged request and whether affected content renders to admins or visitors. Treat as a cleanup priority for legacy WordPress estates. It is not marked KEV and has no provided CVSS score, but stored XSS on a public site can damage brand trust, redirect users, or expose administrator sessions if the vulnerable plugin remains deployed. Mitigation focus: Upgrade Simple Share Buttons Adder to version 4.5 or later.; Remove the plugin if it is unused or unsupported.; Review vendor changelog and advisory guidance before remediation..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.