Vulnerabilities

TI-2025-39022 CVE-2025-62872 · GHSA-rxqj-85wp-2652

WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through <= 3.0.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-09 No fix listed CWE-352

TI-2025-31935 CVE-2025-50022 · GHSA-jch5-356x-7638

WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) Vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JK WP-FB-AutoConnect wp-fb-autoconnect allows Stored XSS.This issue affects WP-FB-AutoConnect: from n/a through <= 4.6…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00256 Published 2025-06-20 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Social Photo Fetcher plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Site Scripting (XSS) Vulnerability