Vulnerabilities

TI-2023-26828 CVE-2023-49169 · GHSA-vgq8-wrpg-ch5m

WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-12-15 No fix listed CWE-79

TI-2023-05379 CVE-2023-5843 · GHSA-97wj-4q63-7pp6

Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution

MEDIUM 48

The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02637 Published 2023-10-30 No fix listed CWE-94

Vulnerabilities

Filters

WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution