Sosh Share Buttons WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Sosh Share Buttons plugin for WordPress, affecting all versions through 1.1.0. The issue arises from inadequate nonce validation in the 'admin_page_content' function, allowing unauthenticated attackers to manipulate the plugin's settings by sending forged requests, provided they can deceive a site administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the plugin's settings, potentially allowing for further exploitation or abuse of the WordPress site.