Feedwordpress

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-0839 MEDIUM This Month

The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing validation on the user controlled 'guid' key. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Feedwordpress

NVD VulDB

CVSS 3.1

5.3

EPSS

0.2%

CVE-2015-4018 MEDIUM POC PATCH This Month

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress SQLi PHP Feedwordpress

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

2.5%

CVE-2024-0839

EPSS 0% CVSS 5.3

MEDIUM This Month

WordPress Authentication Bypass Feedwordpress

NVD VulDB

CVE-2015-4018

EPSS 3% CVSS 6.5

MEDIUM POC PATCH This Month

WordPress SQLi PHP +1

NVD Exploit-DB