Feedwordpress (Feedwordpress Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 56 known versions, newest CVE from 2024-03-13. Vendor: Feedwordpress Project.

CVEs of Feedwordpress

• CVE-2024-0839 - CVSS 5.3 (medium), 2024-03-13: The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing…
• CVE-2021-25055 - CVSS 6.1 (medium), 2022-02-21: The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter.
• CVE-2015-9358 - CVSS 6.1 (medium), 2019-08-28: The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
• CVE-2015-4018 - CVSS 6.5 (medium), 2015-05-21: SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated…