All products

friends

WordPress · Plugin
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Friends 3.5.1 - Authenticated (Subscriber+) PHP Object InjectionCVE-2025-7504 friends WordPress High Fix reported
Friends <= 3.2.1 - Missing AuthorizationCVE-2024-12028 friends WordPress Medium Fix reported
Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request ForgeryCVE-2024-1978 friends WordPress Medium Fix reported