Vulnerabilities

TI-2024-16241 CVE-2024-24710 · GHSA-qf44-4qfp-xrwm

WordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-05-03 No fix listed CWE-862

TI-2020-18908 CVE-2020-36739 · GHSA-qg76-r2j2-x5qp

Feed Them Social – Page, Post, Video, and Photo Galleries <= 2.8.6 - Cross-Site Request Forgery Bypass

LOW 21

The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 Fixed in 2.8.7 CWE-352

TI-2023-10528 CVE-2023-25056 · GHSA-f657-566w-9mhx

WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <= 3.0.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-23 No fix listed CWE-352

TI-2022-02339 CVE-2022-2532 · GHSA-cj82-4g28-6h9v

Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

LOW 29

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00799 Published 2022-08-22 Fixed in 3.0.1 CWE-79

TI-2022-02199 CVE-2022-2383 · GHSA-vhmv-h8q6-8ppm

Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

LOW 36

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05865 Published 2022-08-22 Fixed in 3.0.1 CWE-79

TI-2022-02251 CVE-2022-2437 · GHSA-wxr3-9j23-3f82

Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization

MEDIUM 52

The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' parameter in versions up to, and including 2.9.8.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01726 Published 2022-07-18 No fix listed CWE-502

TI-2015-07727 CVE-2015-9350 · GHSA-3275-rf9p-j4m4

The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.

LOW 29

The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-27 No fix listed CWE-79

TI-2015-07728 CVE-2015-9351 · GHSA-94cr-7gcj-76c2

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution…

MEDIUM 47

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02763 Published 2019-08-27 No fix listed CWE-20

TI-2013-04865 CVE-2013-5711 · GHSA-qm5p-4qj7-wm69

Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the…

LOW 23

Cross-site scripting (XSS) vulnerability in admin/walkthrough/walkthrough.php in the Design Approval System plugin before 3.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the step para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01637 Published 2013-09-17 No fix listed CWE-79

Vulnerabilities

Filters