CVE-2026-39787

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

EUVD-2026-93032

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

CVE-2026-39787

The 10Web Social Photo Feed WordPress plugin, versions

CVE-2026-39787 WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

CVE-2026-39787 WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

PT-2026-106454

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin 10Web Social Photo Feed versions = 1.4.35...

EUVD-2021-11959

Malware in sbrugna...

CVE-2021-25047

The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...

CVE-2021-25047 10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)

The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...

CVE-2021-25047: Improper Neutralization of Input During Web Page Generation

The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...

PT-2022-9603

Name of the Vulnerable Software and Affected Versions 10Web Social Photo Feed WordPress plugin versions prior to 1.4.29 Description The issue is related to a reflected Cross-Site Scripting XSS vulnerability in the wdi apply changes admin page. This allows an attacker to perform an XSS attack...

10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)

The plugin was affected by a reflected Cross-Site Scripting XSS vulnerability in the wdiapplychanges admin page, allowing an attacker to perform such attack against any logged in users...