CVE-2024-35699

CVE-2024-35699 is a Stored XSS flaw in HT Feed (HasThemes) affecting HT Feed versions up to 1.2.8. The issue arises from improper input neutralization during web page generation, enabling authenticated users to inject scripts. Red Hat/ENISA Wordfence context confirms the vulnerability and notes a...

CVE-2023-23804

CVE-2023-23804 affects the HasThemes HT Feed WordPress plugin up to version 1.2.7. It is a CSRF vulnerability (unauthenticated) with a remediation that patches are available in version 1.2.8. PatchStack notes the issue as low severity/low exploit likelihood and recommends updating to 1.2.8 to fix...