Vulnerabilities > Fahadmahmood
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-18 | CVE-2024-10057 | Cross-site Scripting vulnerability in Fahadmahmood RSS Feed Widget The RSS Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rfw-youtube-videos shortcode in all versions up to, and including, 2.9.9 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-06-08 | CVE-2024-35695 | Cross-site Scripting vulnerability in Fahadmahmood WP Docs Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3. | 5.4 |