CVE-2024-0780

Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action

Affected

Enjoy Social Feed plugin for WordPress website

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.77% chance of exploitation in the next 30 days, 55th percentile

Published

2024-03-18

Updated

2025-03-14

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/be3045b1-72e6-450a-8dd2-4702a9328447/

Security advisories

• https://wpscan.com/vulnerability/be3045b1-72e6-450a-8dd2-4702a9328447

References

• CVE Record
• NVD entry