WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
feed-them-gallery
Published
2019-07-08
Title
Feed Them Gallery <= 1.1.8 - XSS
Slug
feed-them-social
Published
2015-02-02
Title
Feed Them Social < 1.7.0 - XSS & Arbitrary Shortcode Execution
Slug
feed-them-social
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
feed-them-social
Published
2022-07-18
Title
Feed Them Social < 2.9.8.6 - Unauthenticated PHAR Deserialisation
Slug
feed-them-social
Published
2022-07-26
Title
Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
Slug
feed-them-social
Published
2022-07-26
Title
Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
Slug
feed-them-social
Published
2022-11-14
Title
Feed Them Social < 3.0.1 - Subscriber+ Stored XSS
Slug
feed-them-social
Published
2022-11-14
Title
Feed Them Social < 3.0.1 - Settings Update via CSRF
Slug
feed-them-social
Published
2023-02-24
Title
Feed Them Social < 4.0.0 - Settings Update via CSRF
Slug
feed-them-social
Published
2020-09-16
Title
Feed Them Social < 2.8.7 - Cross-Site Request Forgery
Slug
feed-them-social
Published
2024-01-31
Title
Feed Them Social < 4.2.1 - Cross-Site Request Forgery via review_nag_check
Slug
feedback-modal-for-website
Published
2025-12-04
Title
Feedback Modal for Website <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Feedback Data Exfiltration via 'export_data' Parameter
Slug
feedback-suite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
feedback-suite
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
feedback-suite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
feedbackscout
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
feedbackscout
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
feedblitz-email-subscription
Published
2025-04-01
Title
Subscription Form for Feedblitz <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feedbucket
Published
2025-04-01
Title
Feedbucket < 1.0.7 - Cross-Site Request Forgery
Slug
feedburner-alternative-and-rss-redirect
Published
2023-07-27
Title
Multiple Plugins from Inisev - Subscriber+ Plugin Installation
Slug
feedburner-alternative-and-rss-redirect
Published
2023-07-27
Title
Multiple Plugins from Inisev - Plugin Installation via CSRF
Slug
feedburner-optin-form
Published
2025-01-16
Title
Feedburner Optin Form <= 0.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
feedfocal
Published
2023-10-24
Title
FeedFocal < 1.3.0 - Unauthenticated Tracking Code Update
Slug
feedlist
Published
2010-11-05
Title
Feedlist < 2.70.00 - XSS
Slug
feedpress-generator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius