What’s Vulnerable › Products

pftool Alfie – Feed Plugin vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your pftool Alfie – Feed Plugin version is affected

Latest pftool Alfie – Feed Plugin vulnerabilities

• CVE-2026-4070 — Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed Deletion via 'delete' Parameter (CVSS 4.3)
• CVE-2026-4069 — Alfie – Feed Plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'naam' Parameter (CVSS 6.1)