CVE-2023-6878: Leechesnutt Slick Social Share Buttons

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dcssb_ajax_update' function in versions up to, and including, 2.4.11. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily.

Affected products

• Leechesnutt Slick Social Share Buttons: up to and including 2.4.11

Published 2024-01-11. Last modified 2026-06-17.