8.8
Élevée
CVE-2024-0779 The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF…
Description
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| enjoy_social_feed 6.2 | premières → 6.2.2 | Pas de correctif indiqué |
| Enjoy Social Feed plugin for WordPress website 6.2 | premières → 6.2.2 | Pas de correctif indiqué |