CVE-2024-32820: 
WordPress vulnerability analysis and mitigation

A Missing Authorization vulnerability was discovered in the WordPress Social Share Icons & Social Share Buttons plugin affecting versions up to 3.6.2. The vulnerability was reported on February 6, 2024, and publicly disclosed on April 22, 2024. This security issue is identified as CVE-2024-32820 (Patchstack).

The vulnerability is classified as a Broken Access Control issue (CWE-862) with a CVSS v3.1 score of 5.3 (Medium), characterized by vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. The security flaw stems from missing authorization checks that could allow unprivileged users to execute certain higher privileged actions (Patchstack).

The vulnerability has been assessed as having a low severity impact and is considered unlikely to be exploited. It primarily affects the notice dismissal functionality of the plugin (Patchstack).

The vulnerability can be exploited by unauthenticated users, requiring no special privileges or user interaction for exploitation (Patchstack).

The vulnerability has been fixed in version 3.6.3 of the plugin. Users are advised to update to this version or later to remove the vulnerability. Additionally, Patchstack has issued a virtual patch to mitigate this issue by blocking potential attacks until users can update to the fixed version (Patchstack).