Armandofiore Fl3r Feelbox
3 CVEs affecting Armandofiore Fl3r Feelbox. Latest disclosed: 2023-02-13. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4445 | Critical | 9.8 | 2023-02-13 | The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available… |
CVE-2022-4552 | Medium | 6.1 | 2023-01-30 | The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could… |
CVE-2022-4553 | Medium | 4.3 | 2023-01-30 | The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perfo… |