Alex.kirk Friends
2 CVEs affecting Alex.kirk Friends. Latest disclosed: 2025-07-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7504 | High | 7.5 | 2025-07-12 | The Friends plugin for WordPress is vulnerable to PHP Object Injection in version 3.5.1 via deserialization of untrusted input of the query_vars parameter This… |
CVE-2024-1978 | Medium | 5.5 | 2024-02-29 | The Friends plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.5 via the discover_available_feeds func… |