CVE-2020-36739

The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the myftsfbloadmore function. This makes it possible for unauthenticated...

CVE-2020-36739

The CVE concerns the WordPress plugin Feed Them Social – Page, Post, Video, and Photo Galleries, affected up to version 2.8.6. The root cause is missing or incorrect nonce validation in the my_fts_fb_load_more() function, enabling Cross-Site Request Forgery that allows unauthenticated attackers t...