CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.5.7.
Explanation of Vulnerability in Simple Terms
Social Share Icons & Social Share Buttons through version 3.5.7 lacks proper authorization checks, allowing authenticated users to modify settings or data they should not have access to. An attacker with a low-privilege account can alter plugin functionality or configuration. The vulnerability requires an existing user account but does not affect data confidentiality or site availability.
What an attacker can do
Modify plugin settings or data with a low-privilege user account.
Potential impact on your site
Unauthorized users can alter social sharing settings, potentially disrupting intended sharing behavior or branding.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
