Extension WordPress
Vulnérabilités Feed Them Social – Social Media Feeds, Video, and Photo Galleries
Cette page rassemble les failles publiées pour Feed Them Social – Social Media Feeds, Video, and Photo Galleries, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Feed Them Social – Social Media Feeds, Video, and Photo Galleries
13 fiches
Feed Them Social <= 4.2.0 – Cross-Site Request Forgery via review_nag_check
The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.0. This is due to missing or incorrect nonce validation on…
*-4.2.0
4.2.1
31/01/2024
Feed Them Social <= 4.0.7 – Cross-Site Request Forgery
The Feed Them Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.7. This is due to missing or incorrect nonce validation on the save_meta_box function. This makes it possible for…
*-4.0.7
4.0.8
29/03/2023
Feed Them Social <= 3.0.2 – Cross-Site Request Forgery
The Feed Them Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.2. This is due to missing or incorrect nonce validation on the following functions: fts_maybe_set_transient, fts_check_nag_get, feed_them_settings, social_follow_button, fts_facebook_page_form,…
*-3.0.2
4.0.0
21/02/2023
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 – Authenticated (Subscriber+) Stored Cross-Site Scripting
The Feed Them Social plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘access_token’ parameter in the function fts_instagram_token_ajax in versions up to, and including, 2.9.9 due to insufficient input sanitization and output escaping. This makes…
*-2.9.9
3.0.1
14/11/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 – Cross-Site Request Forgery to Settings update
The Feed Them Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.9. This is due to missing or incorrect nonce validation on various functions such as fts_instagram_token_ajax(). This makes it…
*-2.9.9
3.0.1
14/11/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 – Authenticated (Subscriber+) Stored Cross-Site Scripting
The Feed Them Social plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘access_token’ parameter in the function fts_encrypt_token_ajax in versions up to, and including, 2.9.8.6 due to insufficient input sanitization and output escaping. This makes…
*-2.9.9
3.0.1
26/07/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 – Reflected Cross-Site Scripting
The Feed Them Social plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘access_token’ parameter in the function fts_refresh_token_ajax in versions up to, and including, 2.9.9 due to insufficient input sanitization and output escaping. This makes…
*-2.9.9
3.0.1
26/07/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.9 – Reflected Cross-Site Scripting
The Feed Them Social plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘expires_in’ parameter in versions up to, and including, 2.9.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-2.9.9
3.0.1
12/07/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 – Cross-Site Request Forgery to Plugin Settings Update
The Feed Them Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.8.5. This is due to missing or incorrect nonce validation on the fts_refresh_token_ajax function. This makes it possible for…
*-2.9.8.5
2.9.8.6
12/07/2022
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 – Unauthenticated PHAR Deserialization
The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' parameter in versions up to, and including 2.9.8.5. This makes it possible for unauthenticated…
*-2.9.8.5
2.9.8.6
12/07/2022
Feed Them Social – Page, Post, Video, and Photo Galleries <= 2.8.6 – Cross-Site Request Forgery Bypass
The Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.6. This is due to missing or incorrect nonce validation on the…
[*, 2.8.7)
2.8.7
16/09/2020
Feed Them Social <= 1.6.9 – Reflected Cross-Site Scripting
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.
*-1.6.9
1.7.0
02/02/2015
Feed Them Social <= 1.6.9 – Arbitrary Shortcode Execution
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.
*-1.6.9
1.7.0
02/02/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.