/Vulnerability Library

WPZOOM Social Icons Widget <= 4.2.15 - Missing Authorization

CVE-2024-30464
Verified

Description

WPZOOM Social Icons Widget & Block versions up to 4.2.15 contain a missing authorization vulnerability caused by insufficient access control in the widget and block, letting attackers perform unauthorized actions, exploit requires no special conditions.

Severity

Medium

CVSS Score

4.3

Exploit Probability

2%

Affected Product

social-icons-widget-by-wpzoom

Published Date

March 13, 2026

Template Author

pussycat0x

CVE-2024-30464.yaml
4.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVE ID:
cve-2024-30464
CWE ID:
cwe-862

References

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/social-icons-widget-by-wpzoom/social-icons-widget-block-by-wpzoom-4215-missing-authorization

Remediation Steps

Update to version 4.2.16 or later.