Feedwordpress Project

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-0839 Mar 13, 16:15 MEDIUM This Month

The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing validation on the user controlled 'guid' key. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Feedwordpress Wordpress Plugin Feedwordpress Project

NVD VulDB

CVSS 3.1

5.3

EPSS

0.2%

CVE-2015-4018 May 21, 20:59 MEDIUM POC PATCH This Month

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress SQLi Feedwordpress Wordpress Plugin +1

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

2.5%

CVE-2024-0839

EPSS 0% CVSS 5.3

MEDIUM This Month

WordPress Authentication Bypass Feedwordpress +2

NVD VulDB

CVE-2015-4018

EPSS 3% CVSS 6.5

MEDIUM POC PATCH This Month

PHP WordPress SQLi +3

NVD Exploit-DB