Easysocialfeed Easy_social_feed
10 CVEs affecting Easysocialfeed Easy_social_feed. Latest disclosed: 2024-12-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-30180 | Medium | 6.5 | 2024-03-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Social Feed allows Stored XSS.This issue affects Eas… |
CVE-2024-1278 | Medium | 6.4 | 2024-03-21 | The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'efb_lik… |
CVE-2021-25120 | Medium | 6.1 | 2022-04-18 | The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in… |
CVE-2024-1213 | Medium | 5.4 | 2024-03-21 | The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… |
CVE-2022-4474 | Medium | 5.4 | 2023-01-23 | The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which… |
CVE-2024-1219 | Medium | 5.3 | 2024-04-17 | The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, whic… |
CVE-2023-48740 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sajid Javed Easy Social Feed easy-facebook-likebox allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2024-30526 | Medium | 4.3 | 2024-03-31 | Cross-Site Request Forgery (CSRF) vulnerability in Easy Social Feed.This issue affects Easy Social Feed: from n/a through 6.5.6. |
CVE-2024-1214 | Medium | 4.3 | 2024-03-21 | The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… |
CVE-2023-6883 | Medium | 4.3 | 2024-01-11 | The Easy Social Feed plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in al… |