PatchTheCVEflickrrss project vulnerabilities
Recent CVEs affecting flickrrss project products. 4 tracked.
flickrrss project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-02-06. Highest priority: CVE-2018-6467 (score 48/100).
- CVE-2018-6469 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows
- CVE-2018-6468 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows
- CVE-2018-6467 HIGH 8.8 DOWNGRADE The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
- CVE-2018-6466 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows
FAQ
How do I fix flickrrss project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flickrrss project being exploited right now?
None of the tracked flickrrss project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flickrrss project CVE should I patch first?
CVE-2018-6467 currently ranks highest (48/100): The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php..