Slick Social Share Buttons WordPress Plugin Unauthorized Option Update Vulnerability

A vulnerability exists in the Slick Social Share Buttons plugin for WordPress, in versions through 2.4.11. The issue arises from a missing capability check in the 'dcssb_ajax_update' function, allowing authenticated attackers with subscriber-level permissions or higher to arbitrarily modify site options.

Impact

Exploitation of this vulnerability allows for unauthorized modification of WordPress site options, which could lead to further exploitation or manipulation of the site.

Remediation

There is no known patch available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.