What’s Vulnerable › Products

rachelos we-mp-rss vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your rachelos we-mp-rss version is affected

Latest rachelos we-mp-rss vulnerabilities

• CVE-2026-111687 — WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint (CVSS 9.8)
• CVE-2026-110617 — we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint (CVSS 4.8)