Skip to content
OpenAdvisories

Vendor

benmoody

4 known vulnerabilities.

Products

Content Syndication Toolkit Reader 1 WP Headless CMS Framework 1 SrcSet Responsive Images for WordPress 1 Content Syndication Toolkit 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-3478

    Content Syndication Toolkit <= 1.3 - Unauthenticated Server-Side Request Forgery via 'url' Parameter

    The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action in the bundled ReduxFramework library. The plugin registers a proxy endpoint (wp_ajax_nopri…

    benmoody Content Syndication Toolkit Web / CMS
  • High 7.1
    CVE-2024-51696

    WordPress Content Syndication Toolkit Reader plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody Content Syndication Toolkit Reader content-syndication-toolkit-reader allows Reflected XSS.This issue affects Content Syndication Toolkit Reader: f…

    benmoody Content Syndication Toolkit Reader
  • High 7.1
    CVE-2024-51702

    WordPress SrcSet Responsive Images for WordPress plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody SrcSet Responsive Images for WordPress truenorth-srcset allows Reflected XSS.This issue affects SrcSet Responsive Images for WordPress: from n/a th…

    benmoody SrcSet Responsive Images for WordPress Web / CMS