Перейти к содержимому
Noroxi

RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

wp-rss-aggregator · плагин

Известные уязвимости для RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging. Узнайте за секунды, какая версия работает на вашем сайте, с WP Lens.

8 известных уязвимостей

последняя 7 мар. 2026 г.

Уязвимости

  • CVE-2026-1216

    RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter

    Высокий 7.2

  • CVE-2025-14745

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregat

    Средний 6.4

  • CVE-2026-2433

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage

    Средний 6.1

  • CVE-2025-14375

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className

    Средний 6.1

  • CVE-2024-9583

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization

    Средний 5.4

  • CVE-2024-0630

    WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source

    Средний 4.8

  • CVE-2024-6621

    WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update

    Средний 4.3

  • CVE-2024-0628

    The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.23.5 via the

    Низкий 3.8

← К каталогу