VendorsAlex Kirkfriendsall versions
Vulnerabilities

Alex Kirk Friends

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2025-7504
Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection
Published 2025-07-12 · Analyzed
8.8EPSS 0.007
CVE-2024-1978
Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery
Published 2024-02-29 · Modified
5.5EPSS 0.005