This vulnerability (CWE-862) in Social Share Pro's Social Share Icons & Social Share Buttons plugin involves missing authorization controls, allowing unauthorized access to functionality that should require permission. It affects versions up to 3.6.2. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official remediation level has been disclosed as of the publication date.

The vulnerability permits unauthorized users to perform actions that should be restricted, potentially leading to integrity issues within the affected plugin's functionality. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the plugin's features or disabling it if feasible to reduce risk.