Deserialization of Untrusted Data Vulnerability Affects Social Media Share Buttons
CVE-2024-2721

8.8HIGH

Key Information:

Vendor

WordPress
Status
Social Media Share Buttons
Vendor
CVE Published:
20 March 2024

What is CVE-2024-2721?

A deserialization vulnerability exists in the Sygnoos Social Media Share Buttons plugin, which can be exploited to process untrusted data improperly. This can lead to various security risks, including arbitrary code execution. The affected versions range from n/a to 2.1.0, posing a significant risk to websites utilizing this plugin. Administrators are encouraged to review and update their installations to safeguard against potential exploitation.

Affected Version(s)

Social Media Share Buttons <= 2.1.0

References

https://patchstack.com/database/vulnerability/social-medi...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dimas Maulana (Patchstack Alliance)
.