Social Rocket Social Sharing Plugin Missing Authorization Vulnerability in WordPress

A vulnerability exists in the Social Rocket – Social Sharing Plugin for WordPress, in all versions through 1.3.4. The issue arises from a lack of proper capability checks in the tweet_settings_save() and tweet_settings_update() functions. This flaw allows authenticated attackers with Subscriber-level access or higher to unauthorizedly modify the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the plugin's settings by authenticated users with Subscriber-level access or higher.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.