Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:fl3r_feelbox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductFl3R Feelbox (f5e1f7e5-c078-534d-98ab-735690453a42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4553 vulnerable 2026-06-08 05:51:59.741590 FL3R FeelBox <= 8.1 - Moods Reset via CSRF
The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables
Published: 2023-01-30T20:31:44.026Z
Updated: 2025-03-27T19:44:35.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4552 vulnerable 2026-06-08 05:51:59.740935 FL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSS
The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Published: 2023-01-30T20:31:51.944Z
Updated: 2025-03-27T19:13:12.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4445 vulnerable 2026-06-08 05:51:59.492468 FL3R FeelBox <= 8.1 - Unauthenticated SQLi
The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Published: 2023-02-13T14:32:00.912Z
Updated: 2025-03-21T14:36:42.620Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.