CVE-2024-3662

🗓️ 13 Apr 2024 08:41:30Reported by WordfenceType

The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpzoom_instagram_clear_data() function in all versions up to, and including, 2.1.13. This allows authenticated attackers to delete all Instagram images

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Plugin WPZOOM Social Feed Widget & Block 安全漏洞	13 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-3662 WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion	13 Apr 202408:41	–	cvelist
EUVD	EUVD-2024-32237	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3662	13 Apr 202409:15	–	nvd
Patchstack	WordPress WPZOOM Social Feed Widget & Block plugin <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion vulnerability	15 Apr 202411:28	–	patchstack
Patchstack	WordPress WPZOOM Social Feed Widget & Block Plugin <= 2.1.13 is vulnerable to Broken Access Control	15 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-27098 · Wpzoom · Wpzoom Social Feed Widget & Block	13 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3662	23 May 202510:13	–	redhatcve
Vulnrichment	CVE-2024-3662 WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion	13 Apr 202408:41	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 8, 2024 to April 14, 2024)	18 Apr 202415:58	–	wordfence

Vulners

Node

wpzoom wpzoom_social_feed_widget_&_blockRange≤2.1.13wordpress

[
  {
    "vendor": "wpzoom",
    "product": "WPZOOM Social Feed Widget & Block",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.1.13",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e3a70510-51c8-49c3-933b-79e79dfb8611

17 Jun 2026 07:44Current

4.3Medium risk

Vulners AI Score4.3

CVSS 3.14.3

EPSS0.00465

SSVC

CWE-862