DatafeedrCVEs & Vulnerabilities
2 CVEs affecting Datafeedr products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
ads by datafeedr.com 2
CVE-2023-49169MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.
15 Dec 2023
5.4
CVSS
CVE-2023-5843CRITICAL
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily.
30 Oct 2023
9.8
CVSS
← PrevPage 1 / 1Next →