Input validation vulnerability in WordPress Share Buttons Plugin – AddThis 5.0.3

The AddThis plugin for WordPress, up to and including version 5.0.2, is vulnerable to a type of cyber attack called Stored Cross-Site Scripting (XSS). This vulnerability can allow even those with limited access rights to inject malicious code into webpages. When these pages are visited by a user, the malicious code will execute, potentially allowing the attacker to gain access to the user’s data. To protect yourself from this vulnerability, it is important to update to a newer version of the AddThis plugin.