CVE-2024-0780high

CVE-2024-0780: high-severity vulnerability in Enjoy Social Feed plugin for WordPress website

Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.8%
The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Related CVEs — Enjoy Social Feed plugin for WordPress website

In the same product, most dangerous first.