Lucene search
+L

4 matches found

CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•37 views

WordPress plugin My Social Feeds – Social Feeds Embedder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.4CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•1 views

CVE-2026-6446: Insufficiently Protected Credentials

The My Social Feeds – Social Feeds Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 1.0.4 via the 'ttpgetaccounts' AJAX action. This is due to the complete absence of authorization checks no capability verification and nonce...

5.4CVSS5.5AI score0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/02 12:00 a.m.•26 views

PT-2026-36567

Name of the Vulnerable Software and Affected Versions My Social Feeds – Social Feeds Embedder versions prior to 1.0.5 Description The plugin is subject to sensitive information exposure via the 'ttp get accounts' AJAX action. The get accounts function lacks authorization checks and nonce...

5.4CVSS5.7AI score0.0032EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2026/05/01 12:00 a.m.•19 views

WordPress My Social Feeds – Social Feeds Embedder Plugin for WP plugin <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Teerachai Somprasong in WordPress Plugin My Social Feeds – Social Feeds Embedder Plugin for WordPress versions = 1.0.4...

5.4CVSS5.8AI score0.0032EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder