Medium · 4.3 CVE-2024-31381 EUVD-2024-29277GHSA-rqpr-4fhr-fpc2

WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: rebelcode Product: Spotlight Social Media Feeds

Description

Cross-Site Request Forgery (CSRF) vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10.

Affected products

Vendor	Product	Affected	Fixed
RebelCode	Spotlight Social Media Feeds	≤ 1.6.10	—

References

https://patchstack.com/database/vulnerability/spotlight-social-photo-feeds/wordpress-spotlight-social-feeds-plugin-1-6-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry