Skip to content
RebelCode RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging
-
CVE-2026-2433
Medium 6.1
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage
0.2%
-
CVE-2026-1216
High 7.2
RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter
0.3%
-
CVE-2025-14745
Medium 6.4
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode
0.3%
-
CVE-2025-14375
Medium 6.1
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className
0.2%
-
CVE-2024-9583
Medium 4.3
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization
0.4%
-
CVE-2024-6621
Medium 4.3
WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update
0.4%
-
CVE-2024-0630
Medium 4.4
WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source
0.4%