This vulnerability (CVE-2024-2721) concerns the deserialization of untrusted data (CWE-502) in the Social Media Share Buttons plugin by Sygnoos, affecting versions through 2.1.0. Deserialization flaws can allow attackers to manipulate serialized data to execute arbitrary code or alter program behavior. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality and integrity impacts but no availability impact. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation could allow an attacker to compromise the confidentiality and integrity of the affected system by executing arbitrary code or manipulating data through deserialization of untrusted input. This could lead to unauthorized access or data modification. There is no indication of availability impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable plugin if feasible, or apply any recommended temporary mitigations from the vendor. Monitor official sources for updates.