PT-2025-2014 · WordPress · Social Share Buttons

Bob Matyas · Published 2025-01-27 · Updated 2025-01-27 · CVE-2024-13117

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Social Share Buttons for WordPress versions 2.7 and earlier

Description The issue allows an unauthenticated user to upload arbitrary images and change the path where they are uploaded.

Recommendations For Social Share Buttons for WordPress versions 2.7 and earlier, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2024-13117

Affected Products

Social Share Buttons

References · 5

• 🔥 https://wpscan.com/vulnerability/3234cdac-f328-4f1e-a1de-31fbd86aefb9 · Exploit
• https://osv.dev/vulnerability/CVE-2024-13117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13117 · Security Note
• https://t.me/cvedetector/16439 · Telegram Post
• https://twitter.com/CVEnew/status/1883768010315370605 · Twitter Post