This vulnerability (CVE-2024-31307) in appscreo's Easy Social Share Buttons plugin is classified as CWE-862 (Missing Authorization). It affects all versions up to 9.4. The issue allows users with some level of privileges to bypass authorization checks, potentially leading to unauthorized information disclosure, modification, or availability impact. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact includes low confidentiality, integrity, and availability impacts. No vendor-provided patch or official remediation level is currently available.

The vulnerability could allow an attacker with limited privileges to perform unauthorized actions within the Easy Social Share Buttons plugin, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, the impact is rated as medium severity, reflecting limited but non-negligible risk. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations or workarounds have been documented by the vendor.