CVE-2024-13874

The Feedify WordPress plugin before 2.4.6 is vulnerable to a Reflected Cross-Site Scripting attack because it does not sanitise and escape a parameter before outputting it back on the page, potentially affecting high-privilege users such as admins. Affected component is the output path handling t...

CVE-2021-38352

The CVE-2021-38352 entry concerns the WordPress plugin Feedify – Web Push Notifications . The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw triggered via the feedify_msg parameter in the file includes/base.php , affecting versions up to and including 2.1.8 . Successful exploitation...