ThemeIsle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

• CVE-2026-110707 Medium 4.7 RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element 0.3%
• CVE-2026-109207 High 7.2 RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL 0.3%
• CVE-2026-104735 Medium 6.4 RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title> 0.2%
• CVE-2026-13252 Medium 6.4 RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute 0.3%
• CVE-2026-8976 Medium 4.3 RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions 0.3%
• CVE-2025-11467 Medium 5.8 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery 0.3%
• CVE-2025-11128 Medium 5.0 Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery 0.3%
• CVE-2023-6805 Medium 6.4 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF) 0.3%
• CVE-2023-6877 Medium 6.4 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message 0.3%
• CVE-2024-1317 High 8.8 RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection 0.7%
• CVE-2024-1318 Medium 6.5 RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication 0.5%
• CVE-2024-1092 Medium 4.3 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.4.1 - Missing Authorization 0.4%
• CVE-2024-1047 Medium 5.3 ThemeIsle SDK <= Various Versions - Missing Authorization 0.6%
• CVE-2023-6798 Medium 5.4 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization 0.3%
• CVE-2023-6801 Medium 6.4 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
• CVE-2020-36758 Medium 4.3 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass 0.5%