7 matches found
CVE-2022-2383
CVE-2022-2383 affects the WordPress plugin Feed Them Social prior to version 3.0.1. The issue is a reflected cross-site scripting (XSS) vulnerability caused by the plugin not sanitising and escaping a parameter before outputting it back to the page. Public sources (NVD/Nuclei/Red Hat summaries) c...
CVE-2015-9351
CVE-2015-9351 concerns the WordPress plugin Feed Them Social (before 1.7.0). The vulnerability allows possible shortcode execution in the Facebook Feeds load more button, enabling arbitrary code execution via shortcode handling. Affected component: Feed Them Social plugin for WordPress; root caus...
CVE-2022-2437
CVE-2022-2437 affects the WordPress plugin Feed Them Social (versions up to and including 2.9.8.5). The vulnerability is described as deserialization of untrusted input through the fts_url parameter, enabling an unauthenticated attacker to trigger a PHAR wrapper to deserialize data and invoke arb...
CVE-2015-9350
The CVE-2015-9350 entry concerns the WordPress plugin Feed Them Social before version 1.7.0, where the Facebook Feeds load more button is vulnerable to reflected cross-site scripting (XSS). The vulnerability allows injected client-side script to be executed in the context of the affected page. Pu...
CVE-2022-2532
The CVE-2022-2532 entry concerns the WordPress plugin Feed Them Social prior to v3.0.1, which is vulnerable to Reflected Cross‑Site Scripting due to a parameter not being sanitised/escaped before output. Impact: potential client-side script execution; CVSSv3.1 base score 6.1 (MEDIUM). Affected co...
CVE-2023-25056
CVE-2023-25056 is a Cross-Site Request Forgery (CSRF) vulnerability in the SlickRemix Feed Them Social WordPress plugin, affecting versions
CVE-2020-36739
The CVE concerns the WordPress plugin Feed Them Social – Page, Post, Video, and Photo Galleries, affected up to version 2.8.6. The root cause is missing or incorrect nonce validation in the my_fts_fb_load_more() function, enabling Cross-Site Request Forgery that allows unauthenticated attackers t...