Alex.kirk

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Alex.kirk records in CISA KEV

No Alex.kirk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Friends 2 records MEDIUM

Records

2 records

TI-2025-06841 CVE-2025-7504 · GHSA-4fh8-fjgg-4q2v

Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection

MEDIUM 42

The Friends plugin for WordPress is vulnerable to PHP Object Injection in version 3.5.1 via deserialization of untrusted input of the query_vars parameter This makes it possible for authenticated attackers, with subscrib…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00815 Published 2025-07-12 No fix listed CWE-502

TI-2024-01841 CVE-2024-1978 · GHSA-xq36-jhc6-fxw2

Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery

LOW 25

The Friends plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.5 via the discover_available_feeds function.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00459 Published 2024-02-29 No fix listed CWE-918

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0