CVE-2026-2501 | waianaeboy702 Ed’s Social Share Plugin up to 2.0 on WordPress Shortcode social_share cross site scripting

A vulnerability has been found in waianaeboy702 Ed’s Social Share Plugin up to 2.0 on WordPress and classified as problematic. The affected element is the function social_share of the component Shortcode Handler. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-2501. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.