Hasthemes Ht Feed vulnerabilities

• hasthemes ht feed, ht plugins feed +1 more WordPress HT Feed plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-35699 6.5 MediumJune 8, 2024
• hasthemes ht feed, ht plugins feed +1 more WordPress HT Feed Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23804 4.3 MediumJuly 10, 2023