WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
feedzy-rss-feeds
Published
2024-01-05
Title
RSS Aggregator by Feedzy < 4.3.3 - Author+ Stored Cross-Site Scripting
Slug
feedzy-rss-feeds
Published
2024-01-05
Title
RSS Aggregator by Feedzy < 4.3.3 - Missing Authorization
Slug
feedzy-rss-feeds
Published
2024-02-02
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.4.2 - Missing Authorization
Slug
feedzy-rss-feeds
Published
2024-02-09
Title
RSS Aggregator by Feedzy < 4.4.3 - Missing Authorization to Arbitrary Page Creation and Publication
Slug
feedzy-rss-feeds
Published
2024-02-09
Title
RSS Aggregator by Feedzy < 4.4.3 - Authenticated(Contributor+) SQL Injection
Slug
feedzy-rss-feeds
Published
2024-04-06
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message
Slug
feedzy-rss-feeds
Published
2024-04-16
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 4.4.8 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF)
Slug
feedzy-rss-feeds
Published
2025-10-22
Title
Feedzy RSS Feeds Lite < 5.1.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
feedzy-rss-feeds
Published
2025-12-10
Title
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator < 5.1.2 - Unauthenticated Blind Server-Side Request Forgery
Slug
fence-url
Published
2024-11-23
Title
Fence URL <= 2.0.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
ferma-ru-net-checkout
Published
2024-10-18
Title
FERMA.ru.net <= 1.3.3 - Authenticated (Subscriber+) SQL Injection
Slug
fetch-jft
Published
2024-05-28
Title
Fetch JFT < 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
fetch-tweets
Published
2021-09-21
Title
Fetch Tweets <= 2.6.4 - Reflected Cross-Site Scripting
Slug
fg-drupal-to-wp
Published
2024-02-02
Title
FG Drupal to WordPress < 3.68.0 - Cross-Site Request Forgery via ajax_importer
Slug
fg-drupal-to-wp
Published
2024-04-05
Title
FG Drupal to WordPress < 3.71.0 - Sensitive Information Exposure
Slug
fg-drupal-to-wp
Published
2025-07-16
Title
FG Drupal to WordPress < 3.90.1 - Authenticated (Admin+) Server-Side Request Forgery
Slug
fg-joomla-to-wordpress
Published
2017-08-24
Title
FG Joomla to WordPress < 3.31.0 - XSS in the AJAX Imported
Slug
fg-joomla-to-wordpress
Published
2024-04-22
Title
FG Joomla to WordPress < 4.21.0 - Sensitive Information Exposure
Slug
fg-prestashop-to-woocommerce
Published
2017-08-24
Title
FG PrestaShop for WooCommerce < 3.20.0 - XSS
Slug
fg-prestashop-to-woocommerce
Published
2024-03-29
Title
FG PrestaShop to WooCommerce < 4.47.0 - Unauthenticated Sensitive Information Disclosure
Slug
fgallery
Published
2014-08-01
Title
fGallery 2.4.1 - fimrss.php SQL Injection
Slug
fgallery_plus
Published
2014-08-01
Title
fGallery_Plus - fim_rss.php album Parameter Reflected XSS
Slug
fifthsegment-whitelist
Published
2024-10-21
Title
Whitelist <= 3.5 - Reflected Cross-Site Scripting
Slug
file-away
Published
2023-05-16
Title
File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via Shortcode
Slug
file-away
Published
2025-03-18
Title
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function