Feed Them Social
Approved changes feed: RSS · Atom
cpe:2.3:a:slickremix:feed_them_social:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Slickremix (c38b5fc0-12de-5a5e-928c-671c81388ce4) |
|---|---|
| Product | Feed Them Social (3239fd4d-18e5-5b0d-83c5-58054d958cd3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/feed-them-social |
purl2cpe | 2026-06-01 10:12:11.324123 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-24710 |
vulnerable | 2026-06-08 06:29:41.588739 |
WordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in SlickRemix Feed Them Social.This issue affects Feed Them Social: from n/a through 4.2.0.
Published: 2024-05-03T07:40:29.840Z
Updated: 2026-04-28T16:09:10.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25056 |
vulnerable | 2026-06-08 05:56:08.459939 |
WordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <= 3.0.2 versions.
Published: 2023-05-23T13:30:39.319Z
Updated: 2026-04-28T16:08:07.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2532 |
vulnerable | 2026-06-08 05:43:35.756782 |
Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Published: 2022-08-22T15:03:21.000Z
Updated: 2024-08-03T00:39:07.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2437 |
vulnerable | 2026-06-08 05:43:35.546024 |
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization
CRITICAL (9.8)
The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' parameter in versions up to, and including 2.9.8.5. This makes it possible for unauthenticated attackers to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.
Published: 2022-07-18T16:13:40.000Z
Updated: 2026-04-08T16:52:23.834Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2383 |
vulnerable | 2026-06-08 05:43:35.435619 |
Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting
The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Published: 2022-08-22T15:02:27.000Z
Updated: 2024-08-03T00:39:06.347Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36739 |
vulnerable | 2026-06-08 05:25:49.508212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9351 |
vulnerable | 2026-06-08 05:07:13.593958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9350 |
vulnerable | 2026-06-08 05:07:13.593575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.