The WordPress plugin Simple Social Buttons version 3.1.1 (a.k.a. Simple Social Media Share Buttons) suffers from a reflected cross-site scripting vulnerability found by Mr.F. It was fixed in version 3.2.0:
https://wordpress.org/plugins/simple-social-buttons/#developers
HTML POC:
xss poc