Enjoy Instagram Instagram Responsive Images Gallery And Carousel Vulnerabilities

The Enjoy Social Feed plugin for WordPress website plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions hooked via admin_init in all versions up to, and including, 6.2.2. This makes it possible for unauthenticated attackers to perform actions like...

CVSS:

5.3

Affected:

up to 6.2.2

Fix:

No patched version reported

Disclosed:

Feb 20, 2024

CVE-2024-0779 on NVD →

The Enjoy Social Feed plugin for WordPress website plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check when accessing the enjoyinstagram_plugin_options page in all versions up to, and including, 6.2.2. This makes it possible for authenticated attackers, w...

CVSS:

4.3

Affected:

up to 6.2.2

Fix:

No patched version reported

Disclosed:

Feb 20, 2024

CVE-2024-0780 on NVD →

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

up to 6.2.0

Fixed in:

6.2.1

Disclosed:

Jul 18, 2023

CVE-2023-33999 on NVD →