Description
WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently make unauthorized AJAX calls and access the debug logs. WordPress Plugin Easy Social Feed-Social Photos Gallery-Post Feed-Like Box version 6.3.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 6.3.4 or latest
References
Related Vulnerabilities
WordPress Plugin SEO-Dashboard by gutewebsites.de Cross-Site Scripting (1.2.5)
Oracle JRE CVE-2012-5071 Vulnerability (CVE-2012-5071)
MongoDb CVE-2019-2390 Vulnerability (CVE-2019-2390)
ProjectSend Insertion of Sensitive Information into Log File Vulnerability (CVE-2019-11492)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-5267)