Skip to content
OpenAdvisories

Vendor

looks_awesome

6 known vulnerabilities.

Products

Team Builder 1 Flow-Flow Social Feed Stream 1 OnionBuzz 1 WordPress Menu Plugin — Superfly Responsive Menu 1 Superfly Menu 1 Flow-Flow Social Stream 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-125799

    WordPress Flow-Flow Social Stream plugin <= 5.0.5 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Looks Awesome Flow-Flow Social Stream flow-flow-social-streams allows Retrieve Embedded Sensitive Data.This issue affects Flow-Flow Social Stream: from n/a throug…

    looks_awesome Flow-Flow Social Stream
  • High 7.1
    CVE-2025-53312

    WordPress OnionBuzz plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz onionbuzz-viral-quiz allows Stored XSS.This issue affects OnionBuzz: from n/a through <= 1.0.7.

    looks_awesome OnionBuzz
  • High 7.6
    CVE-2025-32308

    WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Builder: from n/a through <= 1.5.7.

    looks_awesome Team Builder
  • High 8.8
    CVE-2024-3238

    WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.29 - Cross-Site Request Forgery to Arbitrary File Deletion

    The WordPress Menu Plugin — Superfly Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.29. This is due to missing or incorrect nonce validation on the ajax_handle_delete_icons() function…

    looks_awesome WordPress Menu Plugin — Superfly Responsive Menu Web / CMS
  • High 7.1
    CVE-2024-32553

    WordPress Superfly Menu plugin <= 5.0.25 - Subscriber+ Site-Wide Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Superfly Menu superfly-menu.This issue affects Superfly Menu: from n/a through <= 5.0.25.

    looks_awesome Superfly Menu