Unauthorized Access to Instagram Accounts via Enjoy Social Feed Plugin
CVE-2024-0779
Currently unrated
Key Information:
- Vendor
- Wordpress
- Vendor
- CVE Published:
- 18 March 2024
Badges
๐พ Exploit Exists๐ก Public PoC
Summary
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
Affected Version(s)
Enjoy Social Feed plugin for WordPress website 0 <= 6.2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
Timeline
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
Krzysztof Zajฤ
c (CERT PL)
WPScan