CVE-2021-25120

6.1 mediumEPSS 2.9%

Medium (6.1) in easysocialfeed easy social feed. EPSS 2.9% chance of exploitation in the next 30 days.

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

easysocialfeed:easy_social_feed

References

https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6
https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6

Check your stack JSON