Html Social share buttons

Changelog

2.2.3

  • UPDATE: Tested up to WordPress 7.0
  • FEATURE: Added direct settings link on plugins admin page for quick access

2.2.2

  • BREAKING: Removed Google Plus sharing (service discontinued April 2019)
  • BREAKING: Removed Google Bookmarks (service discontinued September 2021)
  • UPDATE: Renamed Twitter to X (Twitter) following platform rebrand
  • UPDATE: Updated share URL from twitter.com to x.com
  • UPDATE: Requires at least WordPress 5.0
  • UPDATE: Tested up to WordPress 6.9
  • UPDATE: Requires PHP 7.0 minimum
  • SECURITY: Sanitized AJAX input in iconset handlers
  • IMPROVEMENT: Replaced extract() calls for better PHP 8.x compatibility

2.2.1

  • Tested up to WordPress 6.8
  • Tags updated to emphasize lightweight, no-JS focus (limited to 5)
  • Fixed PHP 8.2 deprecation: dynamic property creation in iconsets and core classes
  • Minor code quality improvements

2.2.0

  • SECURITY FIX: Fixed Stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-9849) in zm_sh_btn shortcode
  • SECURITY: Added proper input sanitization for all shortcode attributes using sanitize_text_field(), sanitize_key(), and sanitize_html_class()
  • SECURITY: Added output escaping throughout the plugin using esc_attr(), esc_html(), esc_url(), and esc_textarea()
  • SECURITY: Fixed unescaped HTML output in form functions and stylesheet generation
  • SECURITY: Improved overall security posture with defense-in-depth approach
  • CREDIT: Security vulnerability responsibly disclosed by Peter Thaleikis
  • IMPROVEMENT: Enhanced code quality and WordPress coding standards compliance

2.1.16

  • Previous version features and fixes

Plugin Website
Visit website

Version:
2.2.3
Last Updated
June 4, 2026
Active Installs
70
Requires
WordPress 5.0
Tested Up To
WordPress 7.0
Requires PHP
7.0

Share Post

Join our newsletter.

Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.