coreSocial: Social Networks Sharing Security & Risk Analysis

wordpress.org/plugins/coresocial

Add popular social networks share buttons to posts and pages, lists social network profiles with customizable styling and full block editor support.

0 active installs v3.6.1 PHP 8.0+ WP 6.2+ Updated Nov 12, 2025
blocksdev4pressprofilessocial-sharesocial-sharing
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is coreSocial: Social Networks Sharing Safe to Use in 2026?

Generally Safe

Score 100/100

coreSocial: Social Networks Sharing has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "coresocial" plugin version 3.6.1 demonstrates a generally strong security posture with a significant number of SQL queries utilizing prepared statements and a high percentage of properly escaped outputs. The absence of any recorded historical vulnerabilities, critical taint flows, or dangerous functions further contributes to this positive assessment. However, a notable concern exists regarding the attack surface, specifically one AJAX handler that lacks authentication checks. This unprotected entry point could potentially be exploited by unauthenticated users, leading to unintended actions or information disclosure if not properly secured within the application logic. The presence of bundled libraries, while common, also warrants attention for potential future security concerns if not kept up-to-date, though no specific issues are indicated with the current version of Freemius.

Key Concerns

  • AJAX handler without authentication check
  • Bundled library (Freemius v1.0)
Vulnerabilities
None known

coreSocial: Social Networks Sharing Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

coreSocial: Social Networks Sharing Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
36 prepared
Unescaped Output
21
162 escaped
Nonce Checks
5
Capability Checks
0
File Operations
0
External Requests
4
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared36 total queries

Output Escaping

89% escaped183 total outputs
Attack Surface
1 unprotected

coreSocial: Social Networks Sharing Attack Surface

Entry Points2
Unprotected1

AJAX Handlers 2

authwp_ajax_coresocial_live_handlercore\basic\AJAX.php:27
noprivwp_ajax_coresocial_live_handlercore\basic\AJAX.php:28
WordPress Hooks 21
actionadmin_menucore\admin\MetaBoxes.php:13
actioncoresocial_admin_metabox_social_meta_content_twittercore\admin\MetaBoxes.php:15
actioncoresocial_admin_metabox_social_meta_content_blueskycore\admin\MetaBoxes.php:19
actioncoresocial_admin_metabox_social_meta_content_statscore\admin\MetaBoxes.php:23
actioncoresocial_admin_metabox_social_meta_content_onlinecore\admin\MetaBoxes.php:27
actioncoresocial_admin_metabox_social_meta_content_inlinecore\admin\MetaBoxes.php:31
actionsave_postcore\admin\MetaBoxes.php:36
actionwp_headcore\base\Method.php:32
actioncoresocial_ajax_request_errorcore\basic\AJAX.php:30
actiond4plib_shared_enqueue_preparecore\basic\Plugin.php:55
actionwp_enqueue_scriptscore\basic\Plugin.php:56
filterpre_get_document_titlecore\basic\Plugin.php:57
filterdocument_titlecore\basic\Plugin.php:58
actionwp_headcore\basic\Plugin.php:59
actioncoresocial_online_counts_queue_processorcore\basic\Plugin.php:174
actioncoresocial_load_settingscore\basic\Settings.php:209
filtersupport_forum_urlcore\freemius.php:46
filterpricing/disable_single_packagecore\freemius.php:48
filterpricing/show_annual_in_monthlycore\freemius.php:49
filtercoresocial_css_variablescore\methods\Inline.php:34
filterthe_contentcore\methods\Inline.php:35

Scheduled Events 1

coresocial_online_counts_queue_processor
Maintenance & Trust

coreSocial: Social Networks Sharing Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedNov 12, 2025
PHP min version8.0
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

coreSocial: Social Networks Sharing Developer Profile

Milan Petrovic

17 plugins · 12K total installs

75
trust score
Avg Security Score
94/100
Avg Patch Time
1235 days
View full developer profile
Detection Fingerprints

How We Detect coreSocial: Social Networks Sharing

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/coresocial/build/index.js/wp-content/plugins/coresocial/build/style.css
Script Paths
/wp-content/plugins/coresocial/build/index.js
Version Parameters
coresocial/build/style.css?ver=coresocial/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes
coresocial-sharing-wrappercoresocial-share-buttoncoresocial-profile-link
Data Attributes
data-coresocial-networkdata-coresocial-url
JS Globals
coresocial_script_data
FAQ

Frequently Asked Questions about coreSocial: Social Networks Sharing