Vulnerabilities > Datafeedr

DATE CVE VULNERABILITY TITLE RISK
2023-12-15 CVE-2023-49169 Cross-site Scripting vulnerability in Datafeedr ADS BY Datafeedr.Com
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.
network
low complexity
datafeedr CWE-79
5.4
2023-10-30 CVE-2023-5843 Unspecified vulnerability in Datafeedr ADS BY Datafeedr.Com
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function.
network
low complexity
datafeedr
critical
9.8