What’s Vulnerable › Products
rebelcode RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Latest rebelcode RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging vulnerabilities
- CVE-2026-2433 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage (CVSS 6.1)
- CVE-2026-1216 — RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter (CVSS 7.2)
- CVE-2025-14745 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode (CVSS 6.4)
- CVE-2025-14375 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className (CVSS 6.1)
- CVE-2024-9583 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization (CVSS 5.4)
- CVE-2024-6621 — WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update (CVSS 4.3)
- CVE-2024-4860 — (CVSS 6.1)