CyberSecBulletin

Datafeedrcom vulnerabilities

We track 2 vulnerabilities in Datafeedrcom products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 9, 2024.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Datafeedrcom vulnerabilities

  • 7.5 High severity

    Cloak Affiliate Links for WooCommerce: Improper Access Control

    CVE-2024-1308Datafeedrcom

    The WooCommerce Cloak Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'permalink_settings_save' function in all versions up to, and including, 1.0.33. This makes it possible for u

  • 9.8 Critical severity

    Ads by datafeedr.com: Improper Control of Generation of Code

    CVE-2023-5843DatafeedrcomEPSS 2.64%

    The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the call