Skip to content
OpenAdvisories

Vendor

evigeo

3 known vulnerabilities.

Products

Modal Portfolio 1 WP Filter & Combine RSS Feeds 1 Gestion de tarifs 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-7828

    WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion

    The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the post_listing_page() function in all versions up to, and including, 0.4. This makes it possible for authenticated…

    evigeo WP Filter & Combine RSS Feeds Web / CMS
  • Medium 6.5
    CVE-2025-7662

    Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection

    The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…

    evigeo Gestion de tarifs Web / CMS
  • Medium 5.5
    CVE-2024-13851

    Modal Portfolio <= 1.7.4.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Modal Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administra…

    evigeo Modal Portfolio Web / CMS