Social Feed Gallery WordPress Plugin Information Exposure Vulnerability
Vulnerability
A vulnerability allowing information exposure has been identified in the Social Feed Gallery plugin for WordPress, affecting versions through 4.9.2. The issue arises because the plugin fails to properly verify user authorization, enabling unauthenticated attackers to access and exfiltrate Instagram profile and media data from any connected account.
Impact
Exploitation of this vulnerability allows unauthenticated attackers to access and exfiltrate Instagram profile and media data from accounts connected to the vulnerable WordPress site.
Remediation
Users can update to Social Feed Gallery version 4.9.3 or a newer patched version to address this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.