Log in Start free

rachelos

Products

ProductCVEsExploitedLatest
WeRSS we-mp-rss4–Feb 20, 2026
we-mp-rss2–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-111687 Critical 9.8 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint 1.0%
  • CVE-2026-110617 Medium 4.8 we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint 0.6%
  • CVE-2026-2825 Low 3.5 rachelos WeRSS we-mp-rss Article fix.py fix_html cross site scripting 0.3%
  • CVE-2026-2216 Medium 4.3 rachelos WeRSS we-mp-rss tools.py download_export_file path traversal 0.3%
  • CVE-2026-2215 Low 3.7 rachelos WeRSS we-mp-rss JWT auth.py default key 0.3%
  • CVE-2025-13174 Medium 6.3 rachelos WeRSS we-mp-rss Webhook mps.py do_job server-side request forgery 0.3%