Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
FeedWordPress Advanced Filters: Malicious Code Injection Risk
CVE-2025-68843
Summary
A security issue in FeedWordPress Advanced Filters could allow hackers to inject malicious code into websites, potentially stealing sensitive information or taking control of user accounts. This issue affects versions 0.6.2 and earlier of FeedWordPress Advanced Filters. To stay safe, update to the latest version of the plugin.
Original title
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This issue affects FeedWo...
Original description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This issue affects FeedWordPress Advanced Filters: from n/a through <= 0.6.2.
nvd CVSS3.1
7.1
Vulnerability type
CWE-79
Cross-site Scripting (XSS)
Published: 20 Feb 2026 · Updated: 11 Mar 2026 · First seen: 6 Mar 2026