Vulnerabilities

TI-2026-05614 CVE-2026-6396 · GHSA-4922-xr68-xjg8

Fast & Fancy Filter – 3F <= 1.2.2 - Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Action

LOW 19

The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0018 Published 2026-04-22 No fix listed CWE-352

TI-2025-17715 CVE-2025-23948 · GHSA-wq35-6cg9-m5mj

WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability

LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.Thi…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00938 Published 2025-01-22 No fix listed CWE-98

Vulnerabilities

Filters

Fast & Fancy Filter – 3F <= 1.2.2 - Cross-Site Request Forgery to Settings Modification via fff_save_settins AJAX Action

WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability