VendorsFavorite Postsfavoritesany version
Vulnerabilities

Favorite Posts Favorites any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-2304
Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-05-31 · Modified
6.4EPSS 0.007
CVE-2025-1452
Favorites < 2.3.5 - Admin+ Stored XSS
Published 2025-03-25 · Analyzed
3.5EPSS 0.003