RebelCode Spotlight Social Media Feeds Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information to an unauthorized control sphere has been identified in the RebelCode Spotlight Social Media Feeds plugin, affecting versions through 1.7.1. This vulnerability allows unauthorized users to retrieve embedded sensitive data that is not typically accessible to them.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which may be used to exploit other weaknesses in the system.

Remediation

Users of the RebelCode Spotlight Social Media Feeds plugin should update to version 1.7.2 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.