Akirk Friends
3 CVEs affecting Akirk Friends. Latest disclosed: 2025-07-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7504 | High | 7.5 | 2025-07-12 | The Friends plugin for WordPress is vulnerable to PHP Object Injection in version 3.5.1 via deserialization of untrusted input of the query_vars parameter This… |
CVE-2024-1978 | Medium | 5.5 | 2024-02-29 | The Friends plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.5 via the discover_available_feeds func… |
CVE-2024-12028 | Medium | 5.3 | 2024-12-06 | The Friends plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in all versions up to, an… |