All 4 CVE vulnerabilities found in Favorites, with AI-generated Chinese analysis, references, and POCs.
Vendor: kylephillips
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-60202 | WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability CWE-98 | 7.5 | High | 2025-11-06 |
| CVE-2025-1452 | Favorites < 2.3.5 - Admin+ Stored XSS | 4.8 | - | 2025-03-25 |
| CVE-2024-2948 | Favorites <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 | 6.4 | Medium | 2024-03-30 |
| CVE-2023-2304 | Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 | 6.4 | Medium | 2023-05-31 |
All 4 known CVE vulnerabilities affecting Favorites with full Chinese analysis, references, and POCs where available.