WordPress Social Slider Feed plugin <= 2.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Social Slider Feed versions = 2.2.2...

WordPress Social Slider Feed Plugin <= 2.2.2 is vulnerable to Broken Access Control

Software Social Slider Feed Type Plugin Vulnerable versions = 2.2.2 Fixed in 2.2.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43215 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eebbacd9eb23 Credits Joshua Chan Required...

CVE-2024-38775

Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6...

CVE-2024-38775 WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6...

CVE-2024-38775

CVE-2024-38775 : WordPress CTX Feed plugin (CTX Feed for WooCommerce) has an Improper Privilege Management flaw that allows Privilege Escalation via an arbitrary options update. Affected versions are CTX Feed

WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WP Social Feed Gallery versions = 4.3.9...

WordPress plugin CTX Feed 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress WP Social Feed Gallery Plugin <= 4.3.9 is vulnerable to Broken Access Control

Software WP Social Feed Gallery Type Plugin Vulnerable versions = 4.3.9 Fixed in 4.4.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-39640 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID dd020799eba7 Credits Rafie Muhammad...

PT-2024-28211 · Unknown · Webappick Ctx Feed

Name of the Vulnerable Software and Affected Versions: WebAppick CTX Feed versions n/a through 6.5.6 Description: The issue is related to Improper Privilege Management in WebAppick CTX Feed, allowing Privilege Escalation. Recommendations: For versions n/a through 6.5.6, update to a version that...

PT-2024-28806 · E-Staff · E-Staff

Name of the Vulnerable Software and Affected Versions: E-Staff version 5.1 Description: A CRLF injection issue allows attackers to insert Carriage Return CR and Line Feed LF characters into input fields, leading to HTTP response splitting and header manipulation. Recommendations: For E-Staff...

CVE-2024-38725

CVE-2024-38725 describes a stored XSS vulnerability in the WordPress Admin Dashboard RSS Feed plugin. The issue arises from improper input neutralization during web page generation, allowing stored scripts to execute in the context of affected pages. The vulnerability affects Admin Dashboard RSS ...

PT-2024-28171 · Unknown · Webstix Admin Dashboard

Name of the Vulnerable Software and Affected Versions: Webstix Admin Dashboard versions n/a through 3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in the Webstix Admin Dashboa...

WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

Arbitrary Options Update vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin CTX Feed versions = 6.5.6...

WordPress CTX Feed Plugin <= 6.5.6 is vulnerable to Privilege Escalation

Software CTX Feed Type Plugin Vulnerable versions = 6.5.6 Fixed in 6.5.7 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-38775 Patch priority High CVSS severity High 7.2 Developer Claim ownership PSID cbdae09cf674 Credits stealthcopter Required privilege Sh...

CVE-2024-38476

creationtimestamp| type| source ---|---|--- 2024-07-17 12:43:59+00:00| seen| https://vulnerability.circl.lu/bundle/a23cbcad-e890-4df8-8736-9332ed4c3d47 2024-10-05 20:59:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8689 2024-10-06 03:39:45+00:00| published-proof-of-concept|...

CVE-2022-48811

creationtimestamp| type| source ---|---|--- 2024-07-16 15:26:28+00:00| seen| https://t.me/cvedetector/942 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-06-19 12:46:38+00:00| exploited|...

CVE-2022-48826

creationtimestamp| type| source ---|---|--- 2024-07-16 15:26:11+00:00| seen| https://t.me/cvedetector/930 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-6621

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprssactivatefeedsource' and 'wprsspausefeedsource' functions in all versions up to, and including, 4.23.11...

CVE-2024-6621 WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprssactivatefeedsource' and 'wprsspausefeedsource' functions in all versions up to, and including, 4.23.11...

WordPress WP RSS Aggregator plugin <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update vulnerability

Missing Authorization to Authenticated Subscriber+ Feed State Update vulnerability discovered by Peter Thaleikis in WordPress Plugin WP RSS Aggregator versions = 4.23.11...