Vulnerabilities

TI-2025-12672 CVE-2025-13866 · GHSA-897c-rh8w-85pp

Missing authorization in looks_awesome Flow-Flow Social Feed Stream

LOW 28

The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00249 Published 2025-12-12 No fix listed CWE-862

TI-2025-33279 CVE-2025-53312 · GHSA-3mwr-g9f4-vwj8

WordPress OnionBuzz plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz onionbuzz-viral-quiz allows Stored XSS.This issue affects OnionBuzz: from n/a through <= 1.0.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00123 Published 2025-06-27 No fix listed CWE-352

TI-2025-23405 CVE-2025-32308 · GHSA-4qm8-vg2r-2hg7

WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability

LOW 33

Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Builder: from n/a through <= 1.5.7.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00355 Published 2025-06-09 No fix listed CWE-862

TI-2024-03036 CVE-2024-3238 · GHSA-8hj3-fhcj-rg42

WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion

MEDIUM 40

The WordPress Menu Plugin — Superfly Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.29.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00405 Published 2024-08-02 No fix listed CWE-352

TI-2024-21440 CVE-2024-32553 · GHSA-7qhc-wh2f-7458

WordPress Superfly Menu plugin <= 5.0.25 - Subscriber+ Site-Wide Stored Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00514 Published 2024-04-18 No fix listed CWE-79