Arrowplugins - vulnerabilities (CVEs)
5 CVEs in 4 products, 0 in the last 30 days, newest from 2025-01-07.
Products
- Getresponse And Activecampaign Intergrations - 2 CVEs
- Popup Mailchimp - 2 CVEs
- The Awesome Feed - 2 CVEs
- Social Feed - 1 CVEs
Newest CVEs of Arrowplugins
- CVE-2024-12158 - CVSS 5.3 (medium), 2025-01-07: The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing…
- CVE-2024-12157 - CVSS 7.5 (high), 2025-01-07: The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the…
- CVE-2023-46077 - CVSS 7.1 (high), 2023-10-26: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.
- CVE-2023-45003 - CVSS 7.1 (high), 2023-10-17: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins Social Feed | Custom Feed for Social Media Networks plugin <= 2.2.0 versions.
- CVE-2023-44264 - CVSS 6.5 (medium), 2023-10-02: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.
