Skip to content
OpenAdvisories

Vendor

looks_awesome

5 known vulnerabilities.

Products

Team Builder 1 Flow-Flow Social Feed Stream 1 OnionBuzz 1 WordPress Menu Plugin — Superfly Responsive Menu 1 Superfly Menu 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2025-13866

    Flow-Flow Social Feed Stream 3.0.0 - 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action

    The Flow-Flow Social Feed Stream plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flow_flow_social_auth AJAX action in versions 3.0.0 to 4.7.5. This makes it possible for authenticated attackers,…

    looks_awesome Flow-Flow Social Feed Stream Web / CMS