CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Buttons & Analytics Plugin – GetSocial.io: from n/a through <= 4.5.
Explanation of Vulnerability in Simple Terms
The Social Share Buttons & Analytics Plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to modify plugin settings or data. An attacker with a basic user account can make unauthorized changes without higher-level permissions. The vulnerability affects versions 4.5 and earlier. Update to a version newer than 4.5 to resolve this issue.
What an attacker can do
Modify plugin settings or data without proper authorization.
Potential impact on your site
Unauthorized users can alter plugin configuration, potentially affecting social sharing functionality or analytics data.
Conditions required to exploit
Attacker must have a low-privilege user account on the WordPress site.
Key dates
External resources
Related vulnerabilities
