PRODUCT PROFILE

social-photo-feed-widget

Created from vulnerability 18201 relation agent

wordpress

关联漏洞

共找到 1 条公开漏洞记录

中危CVE-2025-147262026/06/25

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin <= 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely.

social-photo-feed-widgetPoC 已收录

CVSS—