Pftool vulnerabilities

Products

• Alfie – Feed Plugin 2

Newest

• pftool alfie – feed plugin Alfie <= 1.2.1 - Cross-Site Request Forgery to Feed Deletion via 'delete' Parameter CVE-2026-4070 4.3 MediumMay 22, 2026
• pftool alfie – feed plugin Alfie – Feed Plugin <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'naam' Parameter CVE-2026-4069 6.1 MediumMarch 21, 2026