CVE-2024-0779

Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking

High · published March 18, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
27.5
In the wild
Unconfirmed
What it is

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00351 · 27.5th percentile
Published
2024-03-18T19:05Z
EPSS history
Timeline
  • 18 MAR 19:05Z
    Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking
    cvelistv5