Lucene search

K
wpvulndbWpvulndbWPVDB-ID:5DE1C34B-0D16-4B55-86B6-23F5D4E77A49
HistoryJan 03, 2024 - 12:00 a.m.

Easy Social Feed < 6.5.3 - Subscriber+ Settings Update

2024-01-0300:00:00
wpscan.com
2
plugin
vulnerability
unauthorized access
data modification
capability check
ajax functions
facebook
instagram
access tokens
group ids

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

Description The plugin is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions, such as modifying the plugin’s Facebook and Instagram access tokens and updating group IDs.

CPENameOperatorVersion
eq6.5.3

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

Related for WPVDB-ID:5DE1C34B-0D16-4B55-86B6-23F5D4E77A49