Social Media Share Buttons & Social Sharing Icons <= 1.5.1 - Arbitrary Options Deletion

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Arbitrary Options Deletion in versions up to, and including, 1.5.1. This is due to missing capability checks on the sfsi_DeleteSkin() function that deletes options based on a user supplied parameter. This makes it possible for authenticated attackers with subscriber level and above permissions to delete arbitrary site options which can cause a loss of data and functionality on an affected WordPress site.