Description
WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently make unauthorized AJAX calls and access the debug logs. WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box version 6.3.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 6.3.4 or latest
References
Related Vulnerabilities
WordPress Plugin Poll, Survey, Form & Quiz Maker by OpinionStage Cross-Site Scripting (19.6.24)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14893)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2242)
WebLogic CVE-2019-2618 Vulnerability (CVE-2019-2618)
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-14820)