CVE-2024-0780

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Unknown	Enjoy Social Feed plugin for WordPress website	<= 6.2.2
mediabeta	enjoy_social_feed	< 6.2.2

References

https://wpscan.com/vulnerability/be3045b1-72e6-450a-8dd2-4702a9328447/Exploit, Third Party Advisory
https://wpscan.com/vulnerability/be3045b1-72e6-450a-8dd2-4702a9328447/Exploit, Third Party Advisory

Timeline

Published: Mar 18, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-07816.1A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of th CVE-2024-07826.1A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects CVE-2024-07839.8A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processi CVE-2024-07849.8A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/CVE-2024-07866.5The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to ti CVE-2024-07875.9phpIPAM version 1.5.1 contains a vulnerability where an attacker can bypass the IP block mechanism to brute force passwords for users by usi CVE-2024-07886.6SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by trigger CVE-2024-07895.3The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficie CVE-2024-07904.3The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers CVE-2024-07914.3The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or l CVE-2024-07925.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(CVE-2024-07937.7A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.sc