The vulnerability CVE-2024-55982 affects the richteam Share Buttons – Social Media plugin, versions up to 1.0.2. It is caused by improper neutralization of special elements in SQL commands, leading to Blind SQL Injection. This allows remote attackers to inject SQL code without authentication or user interaction. The CVSS 3.1 base score is 9.3, indicating critical severity, with attack vector network, low attack complexity, no privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No patch or vendor advisory is currently available.

An attacker can exploit this vulnerability remotely without authentication to perform Blind SQL Injection attacks, potentially exposing sensitive data (high confidentiality impact). The integrity of data is not affected, but availability impact is low. This could lead to unauthorized data disclosure from the affected system running the vulnerable plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the vulnerable plugin to prevent exploitation.