← Vulnerability feed

Vulnerability record · CVE-2015-9351 · published 27 August 2019

CVE-2015-9351: Slickremix feed them social improper input validation vulnerability

Slickremix · Feed Them Social

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.

9.8 CVSS 3.0 Critical EPSS 2.8% · top 14.3% CWE-20 · Improper input validation
9.8CVSS 3.0 base score, v2 7.5
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://wordpress.org/plugins/feed-them-social/#developers Release Notes
https://wordpress.org/plugins/feed-them-social/#developers Release Notes

Track CVE-2015-9351 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-2437Slickremix feed them social deserialization of untrusted data vulnerabilityThe Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' …EPSS 1.7%8.8CVE-2023-25056Slickremix feed them social cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <= 3.0.2 versions.EPSS 0.26%6.1CVE-2022-2532Slickremix feed them social cross-site scripting vulnerabilityThe Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle…EPSS 0.77%6.1CVE-2022-2383Slickremix feed them social cross-site scripting vulnerabilityThe Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle…EPSS 6.5%6.1CVE-2015-9350Slickremix feed them social cross-site scripting vulnerabilityThe feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.EPSS 0.91%4.3CVE-2020-36739Slickremix feed them social cross-site request forgery vulnerabilityThe Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and…EPSS 0.48%9.5CVE-2026-88771Citrix netscaler application delivery controller improper input validation vulnerabilityImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-…KEVEPSS 1.0%9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2015-9351), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.