CUNY Academic Commons

Thanks for this. I've hidden the plugin in https://github.com/cuny-academic-commons/cac/commit/159f8c5e74e8dc580c3e65e86ac3d99c6e7f1967

According to https://wpscan.com/plugin/wp-social-sharing/ this is an admin-facing XSS vulnerability, which is not good but which is likely difficult to exploit in our trusted environment. As such I will leave the plugin in place and review at a later time whether it needs to be removed completely from the Commons.