CVE-2024-0780
Assigner: WPScan
Published: 2024-03-18T19:05:41.368Z
State: PUBLISHED
title: Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset
problemTypes: descriptions: description: CWE-862 Missing Authorization
type: CWE
affected: vendor: Unknown
product: Enjoy Social Feed plugin for WordPress website
versions: status: affected
versionType: semver
version: 0
lessThanOrEqual: 6.2.2
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action
credits: value: Erwan LR (WPScan)
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator