Looks Awesome vulnerabilities
We track 4 vulnerabilities in Looks Awesome products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2025.
Latest Looks Awesome vulnerabilities
- 7.1 High severity
OnionBuzz: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz onionbuzz-viral-quiz allows Stored XSS.This issue affects OnionBuzz: from n/a through <= 1.0.7.
- 7.6 High severity
Team Builder: Missing Authorization
Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Builder: from n/a through <= 1.5.7.
- 8.8 High severity
WordPress Menu Plugin — Superfly Responsive Menu: Cross-Site Request Forgery
The WordPress Menu Plugin — Superfly Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.29. This is due to missing or incorrect nonce validation on the ajax_handle_delete_icons() function.
- 7.1 High severity
Superfly Menu: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.