Read the docs

looks_awesome

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

looks_awesome records in CISA KEV

No looks_awesome vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-23405 CVE-2025-32308 · GHSA-4qm8-vg2r-2hg7

WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability

Priority LOW 33

Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Builder: from n/a through <= 1.5.7.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00355 Published 2025-06-09 No fix listed CWE-862
TI-2024-21440 CVE-2024-32553 · GHSA-7qhc-wh2f-7458

WordPress Superfly Menu plugin <= 5.0.25 - Subscriber+ Site-Wide Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00514 Published 2024-04-18 No fix listed CWE-79
TI-2025-12672 CVE-2025-13866 · GHSA-897c-rh8w-85pp

Missing authorization in looks_awesome Flow-Flow Social Feed Stream

Priority LOW 28

The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00249 Published 2025-12-12 No fix listed CWE-862
Open these records in search →