Cross-Site Request Forgery Vulnerability in Social Media Share Buttons Plugin for WordPress
CVE-2023-5602
4.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 20 October 2023
What is CVE-2023-5602?
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress has a security vulnerability that allows unauthenticated attackers to perform actions via forged requests. This flaw is due to insufficient nonce validation in several AJAX-related functions. An attacker could exploit this vulnerability by tricking a site administrator into clicking on a deceptive link, potentially compromising the integrity of the site.
Affected Version(s)
Social Media Share Buttons & Social Sharing Icons * <= 2.8.5