A critical SQL injection vulnerability in the WordPress Social Share Buttons plugin version 2.2.3 allows unauthenticated attackers to execute malicious database queries and exfiltrate sensitive information.

This is an SQL injection vulnerability (CWE-89) located in the project_id parameter. An unauthenticated attacker can send a crafted POST request to the plugin to manipulate backend database queries and potentially retrieve the entire database content.

The ability for an unauthenticated attacker to perform arbitrary SQL queries presents a severe risk to data confidentiality and integrity. Successful exploitation could lead to the total compromise of the WordPress database, including user credentials, administrative information, and sensitive site configurations, justifying the high CVSS score of 8.2.

Immediate Action: There is currently no official patch available from the vendor. Users should immediately deactivate and remove the Social Share Buttons plugin from their WordPress environment until a secure version is released.

Proactive Monitoring: Security teams should review web server access logs for suspicious POST requests containing SQL keywords or unusual patterns targeting the plugin endpoint. Monitor database logs for high volumes of error messages or unexpected query activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with active SQL injection protection rules to block malicious payloads targeting the project_id parameter. While this provides a layer of defense, it does not remediate the underlying flaw in the plugin code.

Public Exploit Available: Yes, a published proof-of-concept exists and is attributed to the researcher nu11secur1ty via ExploitDB and their associated GitHub repository.

Given the lack of an available patch and the ease of exploitation, this plugin poses a significant security risk. Administrators must prioritize the immediate removal of the Social Share Buttons plugin to prevent unauthorized database access. Seek alternative social sharing solutions that are actively maintained and vetted for security.