Unauthorized Access to Instagram Accounts via Enjoy Social Feed Plugin
CVE-2024-0779
Currently unrated
What is CVE-2024-0779?
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF in various function hooked to admin_init, allowing unauthenticated users to call them and unlink arbitrary users Instagram Account for example
Affected Version(s)
Enjoy Social Feed plugin for WordPress website 0 <= 6.2.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.