CVE-2024-1214

Summary

CVE-2024-1214: A vulnerability affects the Easy Social Feed plugin for WordPress versions up to 6.5.4. The issue stems from insufficient nonce validation in the save_groups_list function, leading to a Cross-Site Request Forgery (CSRF) weakness. Unauthenticated attackers can exploit this flaw by tricking site administrators into executing a malicious request, enabling them to disconnect a site's Facebook or Instagram page/group connection.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.