Spotlight Social Feeds – Block, Shortcode, and Widget

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Spotlight Social Feeds [Block, Shortcode, and Widget] 1.6.10

    Fixed

    A plugin called "Spotlight Social Media Feeds" used for WordPress is at risk for a security issue called Cross-Site Request Forgery. This can happen in any versions up to 1.6.10. The problem is cause...

    Read More
  • Input validation vulnerability in Freemius SDK 2.5.9 (1072 components affected)

    Fixed

    The Freemius SDK for WordPress is vulnerable to an attack known as Reflected Cross-Site Scripting. This attack is possible because of insufficient security measures in versions of the Freemius SDK up ...

    Read More
  • Input validation vulnerability in Spotlight Social Feeds [Block, Shortcode, and Widget] 1.4.2

    Fixed

    The Spotlight Social Feeds plugin for WordPress is not secure and could allow someone with access to the plugin to inject malicious code into pages. This code can then be run when anyone views the pag...

    Read More
  • Access violation vulnerability in Freemius SDK (620 components affected)

    Fixed

    Freemius, a software development kit used by hundreds of WordPress plugin and theme developers, had a security vulnerability in its older versions (up to and including 2.4.2). This vulnerability could...

    Read More