Akirk Friends vulnerabilities

• akirk friends Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection CVE-2025-7504 7.5 HighJuly 12, 2025
• akirk friends Friends <= 3.2.1 - Missing Authorization CVE-2024-12028 Fix available 5.3 MediumDecember 6, 2024
• akirk friends Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery CVE-2024-1978 5.5 MediumFebruary 29, 2024