https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T20:26:13.105982+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-263541 EUVD-2026-263541 2026-10-28T20:26:13.110502+00:00 EUVD-2026-263541 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13866 fkie_cve-2025-13866 2026-10-28T20:26:13.110542+00:00

The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify plugin settings and store arbitrary JavaScript that executes whenever the plugin settings page is viewed.

 https://cve.radiocsirt.org/vuln/ghsa-897c-rh8w-85pp GHSA-897c-rh8w-85pp 2026-10-28T20:26:13.110862+00:00

The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify plugin settings and store arbitrary JavaScript that executes whenever the plugin settings page is viewed.