CVE-2020-36739

CVE-2020-36739 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress, affecting versions up to and including 2.8.6. This flaw stems from inadequate nonce validation within the my_fts_fb_load_more() function, allowing unauthenticated attackers to load feeds if they can trick an administrator into clicking a malicious link. Rated 4.3 MEDIUM on CVSS, the vulnerability has a network attack vector and low attack complexity, with a potential impact of unauthorized information disclosure (loading feeds). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.