The Social Media & Share Icons plugin for WordPress has a security flaw which allows people with access to the plugin to install additional plugins without proper authorization. This vulnerability affects versions of the plugin up to and including 2.8.1. People with subscriber level access or higher can exploit this vulnerability to potentially install plugins that are not approved or authorized.