Favoriteposts Favorites
2 CVEs affecting Favoriteposts Favorites. Latest disclosed: 2025-03-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2304 | Medium | 6.4 | 2023-05-31 | The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_favorites' shortcode in versions up to, and including, 2.3.2 due… |
CVE-2025-1452 | Low | 3.5 | 2025-03-25 | The Favorites WordPress plugin before 2.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |