Filtered by vendor Datafeedr Subscriptions
Filtered by product Ads By Datafeedr.com Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-5843 1 Datafeedr 1 Ads By Datafeedr.com 2025-02-05 9 Critical
The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The parameters of the callable function are limited, they cannot be specified arbitrarily.
CVE-2023-49169 1 Datafeedr 1 Ads By Datafeedr.com 2024-11-21 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.