Skip to content
OpenAdvisories

Vendor

birdseedapp

1 known vulnerabilities.

Products

BirdSeed 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-4071

    BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Change

    The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing nonce validation in the birdseed_plugin_settings_page() function. The function processes the 'birdseed_token' GET…

    birdseedapp BirdSeed Web / CMS