Lucene search
+L

116 matches found

Patchstack
Patchstack
•added 2026/05/01 9:32 a.m.•15 views

WordPress Easy Social Feed – Social Photos Gallery and Post Feed for WordPress plugin <= 6.6.5 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Easy Social Feed versions = 6.6.5...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/16 7:02 p.m.•23 views

WordPress Easy Social Feed plugin <= 6.5.2 - Missing Authorization to Settings Modification vulnerability

Missing Authorization to Settings Modification vulnerability discovered by Lucio Sá in WordPress Plugin Easy Social Feed versions = 6.5.2...

4.3CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2024-28446

Malicious code in bioql PyPI...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-16980

Malicious code in bioql PyPI...

5.4CVSS8.6AI score0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-51818

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00471EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-28113

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00339EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-16981

Malicious code in bioql PyPI...

4.3CVSS8.6AI score0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-27056

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00237EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-52773

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.0042EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-17039

Malicious code in bioql PyPI...

6.4CVSS8.6AI score0.00399EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/08 2:09 a.m.•32 views

CVE-2025-6067

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...

6.4CVSS5.1AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/06 2:15 a.m.•19 views

CVE-2025-6067

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...

6.4CVSS0.00237EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/06 1:47 a.m.•32 views

CVE-2025-6067 Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...

6.4CVSS0.00237EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/06 1:47 a.m.•7 views

CVE-2025-6067 Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...

6.4CVSS4.7AI score0.00237EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/06 12:00 a.m.•18 views

WordPress plugin Easy Social Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.7AI score0.00237EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/09/06 12:00 a.m.•19 views

PT-2025-36346

Name of the Vulnerable Software and Affected Versions: Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress versions through 6.6.7 Description: The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is susceptible to Stored...

6.4CVSS5.1AI score0.00237EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•2 views

CVE-2025-6067: Improper Neutralization of Input During Web Page Generation

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...

6.4CVSS6AI score0.00237EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/09/05 11:53 p.m.•20 views

WordPress Easy Social Feed plugin <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Easy Social Feed versions = 6.6.7...

6.4CVSS5.5AI score0.00237EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:16 a.m.•18 views

CVE-2024-1219

The Easy Social Feed WordPress plugin before 6.5.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.3CVSS5.9AI score0.00303EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:05 a.m.•23 views

CVE-2024-30526

Cross-Site Request Forgery CSRF vulnerability in Easy Social Feed.This issue affects Easy Social Feed: from n/a through 6.5.6...

4.3CVSS8.6AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder