Arrow Plugins

Products

Product	CVEs	Exploited	Latest
The Awesome Feed – Custom Feed	2	–	Oct 26, 2023
Arrow Custom Feed for Twitter	1	–	Apr 1, 2025
Arrow Maps	1	–	Mar 26, 2025
Social Feed \| Custom Feed for Social Media Networks	1	–	Oct 17, 2023

CVE-2025-31897 Medium 6.5 WordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-28858 High 7.1 WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
CVE-2023-46077 High 7.1 WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
CVE-2023-45003 High 7.1 WordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
CVE-2023-44264 Medium 6.5 WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS) 0.4%