CVE-2024-0973

The Widget for Social Page Feeds WordPress plugin versions prior to 6.4 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw could allow high-privilege users, such as administrators, to perform XSS a...

CVE-2024-13207

The Widget for Social Page Feeds WordPress plugin versions prior to 6.4.2 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the insufficient sanitization and escaping of certain plugin settings. This vulnerability allows high-privilege users, such as administrators, to ...