CVE-2024-0779
EUVD-2024-1656718.03.2024, 19:15
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mediabetaprojects | enjoy_social_feed | 𝑥 ≤ 6.2.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| mediabeta | enjoy_social_feed | 𝑥 ≤ 6.2.2 | ADP |
Common Weakness Enumeration