Is AddToAny Share Buttons safe?

Plugin details

• Slug: add-to-any
• Requires PHP: 5.6+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• AddToAny Share Buttons [add-to-any] < 1.7.48 [CVE-2021-24616, WordPress AddToAny Share Buttons plugin <= 1.7.47 - Stored Cross-Site Scripting (XSS) vulnerability, AddToAny Share Buttons &lt; 1.7.48 - Admin+ Stored Cross-Site Scripting, AddToAny Share Buttons <= 1.7.47 - Authenticated Stored Cross-Site Scripting]
• AddToAny Share Buttons [add-to-any] < 1.7.46 [CVE-2021-24568, WordPress AddToAny Share Buttons plugin <= 1.7.45 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability, AddToAny &lt; 1.7.46 - Authenticated Stored XSS, AddToAny Share Buttons <= 1.7.45 - Authenticated Stored Cross-Site Scripting]
• AddToAny Share Buttons [add-to-any] < 1.7.15 [WordPress AddToAny Share Buttons plugin <=1.7.14 - Conditional Host Header Injection vulnerability]
• AddToAny Share Buttons [add-to-any] < 1.7.15 [AddToAny Share Buttons &lt;= 1.7.14 - Conditional Host Header Injection]
• AddToAny Share Buttons [add-to-any] < 1.7.15 [AddToAny Share Buttons <= 1.7.14 - HTTP Host Header Injection]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Social Media Share Buttons & Social Sharing Icons — 100000+ active installs — max PHP 8.4
• Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More — 100000+ active installs — max PHP 8.4
• WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat — 90000+ active installs — max PHP 8.4
• Ocean Social Sharing — 60000+ active installs — max PHP 8.4
• Buttonizer – Social Media Share Buttons, Social Icons, & Social Feeds — 40000+ active installs — max PHP 8.4