pleer vulnerabilities

Products

• rss feed reader 1
• wp-twitter-feed 1

Latest pleer CVEs

Newest publication first

1. CVE-2010-4825 Peadig's Twitter Feed: Embedded Timeline WordPress Plugin <= 2.2 - Reflected Cross-Site Scripting

   Published 2011-08-24

   Medium·CVSS 4.3 EPSS 1.9%

   Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.

2. CVE-2011-0740 RSS Feed Reader <= 0.1 - Cross-Site Scripting

   Published 2011-02-02

   Medium·CVSS 4.3 EPSS 4.7% Public exploit

   Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in RSS Feed Reader 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the rss_url parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.