CVE-2024-39640 – WP Social Feed Gallery <= 4.3.9 - Missing Authorization

https://notcve.org/view.php?id=CVE-2024-39640

The WP Social Feed Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_add_account() function in versions up to, and including, 4.3.9. This makes it possible for unauthenticated attackers to connect an account. • CWE-862: Missing Authorization •