plugin

Instagram Widget By Wpzoom Vulnerabilities

1 known security issue reported for the Instagram Widget By Wpzoom WordPress plugin. Most recent disclosed Apr 12, 2024.

1 medium

Running Instagram Widget By Wpzoom on your site? Check whether your installed version is affected.

Scan your site free

WPZOOM Social Feed Widget & Block <= 2.1.13 - Missing Authorization to Authenticated (Subscriber+) Instagram Image Deletion

medium

The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpzoom_instagram_clear_data() function in all versions up to, and including, 2.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to del...

CVSS:
4.3
Affected:
up to 2.1.13
Fixed in:
2.1.14
Disclosed:
Apr 12, 2024

CVE-2024-3662 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database