CVE-2018-5655: Weblizar Pinterest-Feeds

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter.

Affected products

• Weblizar Pinterest-Feeds: version 1.1.1 only

Published 2018-01-13. Last modified 2026-06-17.