https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:41:20.262030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6878 CVE-2023-6878 — Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update 2026-10-17T22:41:20.263636+00:00

Affected: remix4 Slick Social Share Buttons

The Slick Social Share Buttons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'dcssb_ajax_update' function in versions up to, and including, 2.4.11. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily.