WP RSS Aggregator
RebelCode
Developer
5.2.0
Latest version
40,000
Installations
No date
Last updated
Vulnerability history
0 present
11 patched
6 Mitigation rules
- WordPress RSS Aggregator - RSS Import, News Feeds, Feed to Post, and Autoblogging plugin <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage vulnerability<= 5.0.1109/03/2026
- Reflected Cross-Site Scripting via 'template' Parameter vulnerability<= 5.0.1018/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode vulnerability<= 5.0.1023/01/2026
- WordPress RSS Aggregator - RSS Import, News Feeds, Feed to Post, and Autoblogging plugin <= 5.0.10 - Reflected Cross-Site Scripting via className vulnerability<= 5.0.1016/01/2026
- Missing Authorization vulnerability<= 4.23.1222/10/2024
- Missing Authorization to Authenticated (Subscriber+) Feed State Update vulnerability<= 4.23.1116/07/2024
- Authenticated (Admin+) Server-Side Request Forgery via RSS Feed Source vulnerability<= 4.23.507/02/2024
- Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source vulnerability<= 4.23.426/01/2024
- Reflected Cross-Site Scripting (XSS) vulnerability<= 4.19.326/01/2022
- Stored Cross-Site Scripting (XSS) vulnerability<= 4.19.229/11/2021
- Stored Cross-Site Scripting (XSS) vulnerability<= 4.19.101/11/2021