What’s Vulnerable › Products
sjaved Easy Social Feed – Social Photos Gallery and Post Feed for WordPress vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Latest sjaved Easy Social Feed – Social Photos Gallery and Post Feed for WordPress vulnerabilities
- CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
- CVE-2025-6067 — Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2023-48740 — WordPress Easy Social Feed plugin <= 6.5.1 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- CVE-2024-1219 — Easy Social Feed < 6.5.6 - Contributor+ Stored XSS (CVSS 5.3)
- CVE-2024-30526 — WordPress Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin <= 6.5.6 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-30180 — WordPress Easy Social Feed plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-1278 — Easy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2024-1214 — Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2024-1213 — Easy Social Feed <= 6.5.4 - Cross-Site Request Forgery (CVSS 4.3)
- CVE-2023-6883 — Easy Social Feed <= 6.5.2 - Missing Authorization to Settings Modification (CVSS 4.3)
- CVE-2022-4474 — Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS (CVSS 5.4)
- CVE-2021-25120 — Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting (CVSS 6.1)