WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Floating Social Media Icon plugin has a cross-site scripting vulnerability that stems from the lack of proper authentication of client-side data in the WEB application. An authenticated attacker could exploit the vulnerability to execute client-side code.