8.8
High
CVE-2024-0779 The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF…
Description
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| enjoy_social_feed 6.2 | earliest → 6.2.2 | No fix stated |
| Enjoy Social Feed plugin for WordPress website 6.2 | earliest → 6.2.2 | No fix stated |