The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is not secure in versions up to 2.8.5. This means that a malicious user who is a subscriber to the plugin can gain access to sensitive information like authentication tokens, secrets, and app passwords. This can be done by using the sfsi_save_export function.