CVE-2024-0780: high-severity vulnerability in Enjoy Social Feed plugin for WordPress website
Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 0.8%
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · Enjoy Social Feed plugin for WordPress websiteRelated CVEs — Enjoy Social Feed plugin for WordPress website
In the same product, most dangerous first.