This vulnerability (CWE-22) in appscreo Easy Social Share Buttons allows an attacker to perform path traversal, bypassing restrictions on file paths and enabling PHP Local File Inclusion. This can result in arbitrary file access and code execution within the context of the web server. The issue affects all versions through 9.4. The CVSS 3.1 vector indicates network attack vector with high attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation can lead to full compromise of the affected system, including disclosure of sensitive files, modification of data, and disruption of service. The vulnerability is rated high severity with a CVSS score of 8.5. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the vulnerable plugin, disabling it if possible, or applying web application firewall rules to block path traversal attempts. Monitor vendor channels for updates.