Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Mediabetaprojects Clear all filters
TI-2024-00717 CVE-2024-0779 · GHSA-qqm8-xpjj-m663

Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking

Priority HIGH 73

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00351 Published 2024-03-18 No fix listed CWE-352
TI-2024-00718 CVE-2024-0780 · GHSA-fxj6-8fmc-7h79

Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset

Priority HIGH 71

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0077 Published 2024-03-18 No fix listed CWE-862