Skip to content
Sign in
4.3 Medium

CVE-2023-6883 The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…

Description

The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 6.5.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions, such as modifying the plugin's Facebook and Instagram access tokens and updating group IDs.

Affected products and versions

Product Affected versions Fixed in
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box 6.5 earliest → 6.5.2 No fix stated
Easy Social Feed – Social Photos Gallery and Post Feed for WordPress 6.5 earliest → 6.5.2 No fix stated

Other CVEs of Easy Social Feed – Social Photos Gallery – Post Feed – Like Box

The 6 CVEs of Easy Social Feed – Social Photos Gallery – Post Feed – Like Box →
CVE-2025-6067 The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored… 6.4 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium CVE-2024-1278 The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored… 6.4 Medium CVE-2024-1214 The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site… 4.3 Medium
Track this CVE