Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset

2024-02-2000:00:00

Erwan LR (WPScan)

enjoy social feed

plugin

database reset

subscriber

diagnostic tab

re-install

exploit

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not have authorisation when resetting its database, allowing any authenticated users, such as subscriber to perform such action

Log in as a subscriber, access the Diagnostic tab of the plugin (/wp-admin/admin.php?page=enjoyinstagram_plugin_options&tab=diagnostic) and click on the re-install database button at the bottom