flickrrss vulnerabilities and fixes

Recent CVEs affecting flickrrss, with upgrade or downgrade steps. 4 tracked.

flickrrss has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-06. Highest priority: CVE-2018-6467 (score 48/100).

• CVE-2018-6469 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows
• CVE-2018-6468 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows
• CVE-2018-6467 HIGH 8.8 DOWNGRADE The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
• CVE-2018-6466 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows

FAQ

How do I fix flickrrss vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is flickrrss being exploited right now?

None of the tracked flickrrss CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which flickrrss CVE should I patch first?

CVE-2018-6467 currently ranks highest (48/100): The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php..

RSS feed for flickrrss · ← Back to latest CVEs