Plugin icon

Friends

friends

Vulnerabilities:

3

Last Updated:

September 15, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2025-07-11
Title
Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection
Fixed in
Fixed in 3.5.2
CVSS
7.5 (high)
Published
2024-12-05
Title
Friends < 3.2.2 - Missing Authorization
Fixed in
Fixed in 3.2.2
CVSS
5.3 (medium)
Published
2024-02-28
Title
Friends < 2.8.6 - Authenticated (Admin+) Blind Server-Side Request Forgery
Fixed in
Fixed in 2.8.6
CVSS
5.5 (medium)