Read the docs

feedify

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

feedify records in CISA KEV

No feedify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web Push Notifications 2 records MEDIUM

Records

4 records

TI-2024-12895 CVE-2024-13874 · GHSA-gwjc-9mv6-q8q2

Feedify – Web Push Notifications < 2.4.6 - Reflected XSS

Priority MEDIUM 64

The Feedify WordPress plugin before 2.4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00285 Published 2025-04-10 Fixed in 2.4.6 CWE-79
TI-2025-23605 CVE-2025-32540 · GHSA-3f43-pmrc-xpp4

WordPress Feedify – Web Push Notifications plugin <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in feedify Feedify – Web Push Notifications push-notification-by-feedify allows Reflected XSS.This issue affects Feedify…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2021-15959 CVE-2021-38352 · GHSA-v3rc-82pr-v7xw

Feedify – Web Push Notifications <= 2.1.8 Reflected Cross-Site Scripting

Priority LOW 29

The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_msg parameter found in the ~/includes/base.php file which allows attackers to inject arbitrary web scr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00895 Published 2021-09-10 No fix listed CWE-79
Open these records in search →