rachelos we-mp-rss

• CVE-2026-111687 Critical 9.8 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint 1.0%
• CVE-2026-110617 Medium 4.8 we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint 0.6%