CVE-2025-15377: CSRF in Sosh Share Buttons WordPress Plugin

Successful exploitation of this CSRF vulnerability could allow an attacker to modify the Sosh Share Buttons plugin's configuration without authentication. This could lead to various consequences depending on the plugin's functionality. For example, an attacker might alter the sharing destinations, redirect users to malicious sites, or inject unwanted code. The impact is amplified if the plugin is heavily used or integrated with other critical site components. While the vulnerability requires administrator interaction, social engineering tactics like phishing emails or malicious links can be employed to achieve this.

1. Reserved2025-12-30
2. Published2026-01-14
3. Modified2026-04-08
4. EPSS updated2026-03-23

The primary mitigation for CVE-2025-15377 is to upgrade the Sosh Share Buttons plugin to a version that includes the necessary nonce validation. Since a fixed version is not specified, contact the plugin developer for an updated release. As a temporary workaround, implement a Web Application Firewall (WAF) rule to filter out suspicious requests targeting the 'adminpagecontent' function. Regularly review plugin settings for any unauthorized changes. Consider disabling the plugin if immediate upgrade is not possible.