The Social Media & Share Icons plugin for WordPress is not secure in versions up to 2.8.3. This means that malicious attackers could inject web scripts into pages that could be executed if they trick a user into clicking on a link. This vulnerability is due to the plugin not properly checking and preventing potentially dangerous input or output.