{"id":3180,"date":"2024-03-12T11:45:48","date_gmt":"2024-03-12T11:45:48","guid":{"rendered":"http:\/\/127.0.0.1\/vulnerabilidad-csrf-en-easy-social-feed-6-5-4\/"},"modified":"2024-03-12T11:45:48","modified_gmt":"2024-03-12T11:45:48","slug":"vulnerabilidad-csrf-en-easy-social-feed-6-5-4","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/vulnerabilidad-csrf-en-easy-social-feed-6-5-4\/","title":{"rendered":"Vulnerabilidad CSRF en Easy Social Feed <= 6.5.4"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad de Cross-Site Request Forgery (CSRF) en el plugin Easy Social Feed para WordPress afecta a todas las versiones hasta la 6.5.4. Esta vulnerabilidad se debe a la falta de validaci\u00f3n de nonce en las funciones esf_insta_save_access_token y efbl_save_facebook_access_token, lo que permite a atacantes no autenticados conectar sus p\u00e1ginas de Facebook e Instagram al […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[893],"class_list":["post-3180","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1213"],"yoast_head":"\n