mirror of
https://github.com/0xMarcio/cve.git
synced 2025-06-19 17:30:12 +00:00
1.0 KiB
1.0 KiB
CVE-2024-0779
Description
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
POC
Reference
- https://wpscan.com/vulnerability/ced134cf-82c5-401b-9476-b6456e1924e2/
- https://wpscan.com/vulnerability/ced134cf-82c5-401b-9476-b6456e1924e2/