Vulnerabilities / Flow-Flow Social Feed Stream
Flow-Flow Social Feed Stream vulnerabilities
Advisories WPSec published for Flow-Flow Social Feed & Social Wall. Other sources may list more. Its attack surface: Flow-Flow Social Feed Stream on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-2939 | Flow-Flow Social Feed Stream <= 5.0.5 - Cross-Site Request Forgery to Post Moderation Changes | Medium 4.3 | 5.0.8 |
| 2026-11-12 | WPSEC-2026-2938 | Flow-Flow Social Feed Stream <= 5.0.5 - Authenticated (Subscriber+) Missing Authorization to Backup Management, Debug Log Access, and Cron Execution | Medium 5.0 | 5.0.8 |
| 2026-11-12 | WPSEC-2026-2937 | Flow-Flow Social Feed Stream <= 5.0.5 - Authenticated (Subscriber+) Missing Authorization to Subscription Settings Modification | Medium 4.3 | 5.0.8 |
| 2026-11-12 | WPSEC-2026-2936 | Flow-Flow Social Feed Stream <= 5.0.5 - Unauthenticated Missing Authorization to Feed Cache Deletion and Forced Refresh | Medium 6.5 | 5.0.8 |
| 2026-11-12 | WPSEC-2026-2935 | Flow-Flow Social Feed Stream <= 5.0.5 - Unauthenticated Sensitive Information Exposure of Unapproved Posts via refresh_feeds | Medium 5.3 | 5.0.8 |
License: CC BY 4.0