Social Feed

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5661 Nov 07, 12:15 MEDIUM POC This Month

The Social Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialfeed' shortcode in all versions up to, and including, 1.5.4.6 due to insufficient input. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Social Feed Wordpress Plugin Web Settler

NVD VulDB

CVSS 3.1

6.4

EPSS

0.1%

CVE-2023-45003 Oct 17, 11:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Social Feed Arrowplugins

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2023-5661

EPSS 0% CVSS 6.4

MEDIUM POC This Month

WordPress XSS Social Feed +2

NVD VulDB

CVE-2023-45003

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Social Feed Arrowplugins

NVD