Saas.group Juicer
2 CVEs affecting Saas.group Juicer. Latest disclosed: 2026-06-10. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-53737 | Medium | 6.1 | 2026-06-10 | Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected fe… |
CVE-2023-0172 | Medium | 5.4 | 2023-03-13 | The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shor… |