Arrow Plugins

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Arrow Plugins records in CISA KEV

No Arrow Plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

The Awesome Feed 2 records LOW Social Feed 1 record LOW

Records

7 records

TI-2024-11273 CVE-2024-12157 · GHSA-6rg7-6793-p4v5

Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection

MEDIUM 41

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX action in all versions up to, and includin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01041 Published 2025-01-07 No fix listed CWE-89

TI-2025-20801 CVE-2025-28858 · GHSA-gr4p-qg3r-wj73

WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arrow Maps ap-google-maps allows Reflected XSS.This issue affects Arrow Maps: from n/a through <= 1.0.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-26 No fix listed CWE-79

TI-2023-24730 CVE-2023-46077 · GHSA-32vv-cw3x-ch8f

WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-26 No fix listed CWE-79

TI-2023-24064 CVE-2023-45003 · GHSA-vr7r-prw9-wjpq

WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin <= 2.2.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-17 No fix listed CWE-79

TI-2024-11274 CVE-2024-12158 · GHSA-x2hv-7jf3-p2rf

Missing authorization in Arrow Plugins Popup – MailChimp, GetResponse and ActiveCampaign…

LOW 30

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upc_delete_db_data' AJAX action in all version…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2025-01-07 No fix listed CWE-862

TI-2023-23790 CVE-2023-44264 · GHSA-wjqg-8gh6-x2p4

WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-10-02 No fix listed CWE-79

TI-2025-23034 CVE-2025-31897 · GHSA-7fpm-c83j-p8vv

WordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arrow Custom Feed for Twitter arrow-twitter-feed allows Stored XSS.This issue affects Arrow Custom Feed…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	3
Low	0
No CVSS	0