Stored Cross-Site Scripting Vulnerability in Ocean Social Sharing Plugin for WordPress

CVE-2025-7500

What is CVE-2025-7500?

The Ocean Social Sharing plugin for WordPress suffers from a Stored Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitization and output escaping in its social icon titles. This flaw enables authenticated users with Contributor-level access or higher to inject malicious web scripts into pages. The injected scripts are executed whenever a user visits an affected page, potentially compromising user data and site integrity. Users of affected versions should implement patches or update to secure versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References