Skip to content

pftool

Products

Product	CVEs	Exploited	Latest
Alfie – Feed Plugin	2	–	May 22, 2026

Exploited and recent CVEs

CVE-2026-4070 Medium 4.3 Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed Deletion via 'delete' Parameter 0.2%
CVE-2026-4069 Medium 6.1 Alfie – Feed Plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'naam' Parameter 0.3%