Vulnerabilities > CVE-2023-6878 - Unspecified vulnerability in Leechesnutt Slick Social Share Buttons 2.4.11

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
leechesnutt
NVD
Published: 2024-01-11
Updated: 2024-11-21

Summary

The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dcssb_ajax_update' function in versions up to, and including, 2.4.11. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily.

Vulnerable Configurations

Part Description Count
Application
Leechesnutt
1

References