Vulnerabilities

TI-2023-08860 CVE-2023-22685 · GHSA-pmw5-fcgr-xhvh

WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-12 No fix listed CWE-79

TI-2023-08866 CVE-2023-22691 · GHSA-pw2g-wqc9-f5g9

WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-05-03 No fix listed CWE-352

TI-2019-04283 CVE-2019-5993 · GHSA-gh33-3m49-c3fm

Cross-site request forgery in Category Specific RSS feed Subscription version v2.0 and…

MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Category Specific RSS feed Subscription version v2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00846 Published 2019-09-12 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)

WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-site request forgery in Category Specific RSS feed Subscription version v2.0 and…