CVE-2024-33930: 
WordPress vulnerability analysis and mitigation

The Share This Image WordPress plugin versions up to 1.98 contains an Open Redirect vulnerability (CVE-2024-33930). The vulnerability was discovered by researcher stealthcopter and was publicly disclosed on April 29, 2024. This security issue affects unauthenticated users and has been assigned a CVSS score of 4.7 (Medium) (Patchstack).

The vulnerability is classified as a URL Redirection to Untrusted Site ('Open Redirect') issue, identified as CWE-601. The security flaw exists due to insufficient validation of redirect URLs supplied to the plugin. The vulnerability has received a CVSS v3.1 base score of 4.7 with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N (WPScan).

The vulnerability could allow malicious actors to redirect users from legitimate sites to potentially malicious ones. This could be exploited in phishing attacks where users are tricked into visiting a legitimate site before being redirected to a malicious destination (Patchstack).

The vulnerability can be exploited by unauthenticated attackers who can successfully trick users into performing specific actions. The attack requires user interaction and has been classified as having low complexity (Patchstack).

The vulnerability has been fixed in version 1.99 of the Share This Image plugin. Users are advised to update to this version or later to remove the vulnerability. The security issue has been assessed as having a low severity impact and is considered unlikely to be exploited (Patchstack).