CVE

CVE-2022-0594

5.3

CVSS

Description

The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.

Attack Vector

Privileges Req.

User Interaction

professional social sharing buttons, icons & related posts – shareaholic

Updated Sep 26, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0594 Scanner

CVE-2022-0594 scanner - Improper Access Control vulnerability in Professional Social Sharing Buttons, Icons & Related Posts plugin for Wordpress

Used 2.6k times · 3.3k assets checked · url

Scanner page →Run scanner

CVE history: professional social sharing buttons, icons & related posts – shareaholic

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →