Extension WordPress
Vulnérabilités Flow-Flow Social Streams
Cette page rassemble les failles publiées pour Flow-Flow Social Streams, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Flow-Flow Social Streams
2 fiches
Flow-Flow Social Feed Stream 3.0.0 – 4.7.5 – Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action
The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5. This makes it possible for authenticated attackers,…
3.0.0-4.7.5
5.0.1
11/12/2025
Flow-Flow Social Feed Stream <= 3.0.71 – Cross-Site Scripting
The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.0.71 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web…
[*, 3.0.72)
3.0.72
05/11/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.