PT-2025-31737 · WordPress · Ocean Social Sharing

Muhammad Yudha

·

Published

2025-08-02

·

Updated

2025-08-02

·

CVE-2025-7500

CVSS v3.1
6.4
VectorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions:

Ocean Social Sharing plugin for WordPress versions prior to 2.2.2

Description:

The Ocean Social Sharing plugin for WordPress is susceptible to Stored Cross-Site Scripting through social icon titles due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page.

Recommendations:

Update the Ocean Social Sharing plugin to version 2.2.2 or later.

Fix

XSS

Weakness Enumeration

Related Identifiers

CVE-2025-7500

Affected Products

Ocean Social Sharing