Stored Cross-Site Scripting Vulnerability in Ocean Social Sharing Plugin for WordPress

CVE-2025-7500

What is CVE-2025-7500?

The Ocean Social Sharing plugin for WordPress suffers from a Stored Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitization and output escaping in its social icon titles. This flaw enables authenticated users with Contributor-level access or higher to inject malicious web scripts into pages. The injected scripts are executed whenever a user visits an affected page, potentially compromising user data and site integrity. Users of affected versions should implement patches or update to secure versions to mitigate this risk.

References