Skip to content
OpenAdvisories

Vendor

Alex

5 known vulnerabilities.

Products

Featured Video Plus 2 Content Mask 2 Include Fussball.de Widgets 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-66637

    WordPress Featured Video Plus plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.

    Alex Featured Video Plus
  • Medium 5.3
    CVE-2026-66685

    WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.

    Alex Featured Video Plus
  • Medium 6.4
    CVE-2025-58011

    WordPress Content Mask plugin <= 1.8.5.2 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Alex Content Mask content-mask allows Server Side Request Forgery.This issue affects Content Mask: from n/a through <= 1.8.5.2.

    Alex Content Mask
  • Medium 6.5
    CVE-2024-47643

    WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widgets allows Stored XSS.This issue affects Include Fussball.de Widgets: from n/a through <= 4.0.0.

    Alex Include Fussball.de Widgets