Smashballoon Feeds For Youtube — known CVE vulnerabilities

Every CVE whose affected-product data names Smashballoon Feeds For Youtube, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-4841 — CVSS 6.4 (medium): The Feeds for YouTube plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'youtube-feed' shortcode in versions up to, and…
• CVE-2024-6256 — CVSS 6.4 (medium): The Feeds for YouTube (YouTube video, channel, and gallery plugin) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…