TI-2023-06283 CVE-2023-6878 · GHSA-5fjw-4jww-5859Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option UpdatePriority LOW 39The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dcssb_ajax_update' function in versions up to, and including, 2.4.11.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00487 · Published 2024-01-11 · No fix listed CWE-285