WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
feedwordpress
Published
2015-04-26
Title
FeedWordPress <= 2015.0426 - Cross-Site Scripting (XSS)
Slug
feedwordpress
Published
2015-05-19
Title
FeedWordPress < 2015.0514 - XSS & SQL-Injection
Slug
feedwordpress
Published
2022-01-18
Title
FeedWordPress < 2022.0123 - Reflected Cross-Site Scripting (XSS)
Slug
feedwordpress
Published
2024-03-04
Title
FeedWordPress < 2024.0428 - Unauthenticated Draft Access
Slug
feedzy-rss-feeds
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
feedzy-rss-feeds
Published
2023-01-04
Title
RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS
Slug
feedzy-rss-feeds
Published
2020-09-16
Title
RSS Aggregator by Feedzy < 3.4.3 - Arbitrary Settings Update via CSRF
Slug
feedzy-rss-feeds
Published
2024-01-05
Title
RSS Aggregator by Feedzy < 4.3.3 - Author+ Stored Cross-Site Scripting
Slug
feedzy-rss-feeds
Published
2024-01-05
Title
RSS Aggregator by Feedzy < 4.3.3 - Missing Authorization
Slug
feedzy-rss-feeds
Published
2024-02-02
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.4.2 - Missing Authorization
Slug
feedzy-rss-feeds
Published
2024-02-09
Title
RSS Aggregator by Feedzy < 4.4.3 - Missing Authorization to Arbitrary Page Creation and Publication
Slug
feedzy-rss-feeds
Published
2024-02-09
Title
RSS Aggregator by Feedzy < 4.4.3 - Authenticated(Contributor+) SQL Injection
Slug
feedzy-rss-feeds
Published
2024-04-06
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message
Slug
feedzy-rss-feeds
Published
2024-04-16
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.4.8 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
Slug
feedzy-rss-feeds
Published
2025-10-22
Title
Feedzy RSS Feeds Lite < 5.1.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
feedzy-rss-feeds
Published
2025-12-10
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 5.1.2 - Unauthenticated Blind Server-Side Request Forgery
Slug
felan-framework
Published
2026-01-08
Title
Felan Framework <= 1.1.3 - Unauthenticated SQL Injection
Slug
fence-url
Published
2024-11-23
Title
Fence URL <= 2.0.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
ferma-ru-net-checkout
Published
2024-10-18
Title
FERMA.ru.net <= 1.3.3 - Authenticated (Subscriber+) SQL Injection
Slug
fetch-jft
Published
2024-05-28
Title
Fetch JFT < 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
fetch-tweets
Published
2021-09-21
Title
Fetch Tweets <= 2.6.4 - Reflected Cross-Site Scripting
Slug
fg-drupal-to-wp
Published
2024-02-02
Title
FG Drupal to WordPress < 3.68.0 - Cross-Site Request Forgery via ajax_importer
Slug
fg-drupal-to-wp
Published
2024-04-05
Title
FG Drupal to WordPress < 3.71.0 - Sensitive Information Exposure
Slug
fg-drupal-to-wp
Published
2025-07-16
Title
FG Drupal to WordPress < 3.90.1 - Authenticated (Admin+) Server-Side Request Forgery
Slug
fg-joomla-to-wordpress
Published
2017-08-24
Title
FG Joomla to WordPress < 3.31.0 - XSS in the AJAX Imported