JK vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.1%	CVE-2025-62872Social Photo Fetcher (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-09CVE Database V5CVE-2025-62872 Cross-Site Request Forgery (CSRF) vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through <= 3.0.4. EPSS 0.1%Vulnerability JK CWE-352	CVE Database V5	2025-12-09
Medium	5.9	EPSS 0.3%	CVE-2025-50022JK WP-FB-AutoConnect · Cross-site Scripting Medium5.9EPSS 0.3%2025-06-20CVE Database V5CVE-2025-50022 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JK WP-FB-AutoConnect wp-fb-autoconnect allows Stored XSS.This issue affects WP-FB-AutoConnect: from n/a through <= 4.6.4. EPSS 0.3%Vulnerability	CVE Database V5	2025-06-20

Page 1 of 1