Read the docs

rebelcode

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

rebelcode records in CISA KEV

No rebelcode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rss Aggregator 3 records MEDIUM Spotlight Social Feeds 1 record MEDIUM

Records

3 records in Rss Aggregator · all components

TI-2024-08890 CVE-2024-9583 · GHSA-6fjr-qhr8-g6mc

RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization

Priority MEDIUM 58

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax_send_premium_support…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00411 Published 2024-10-23 No fix listed CWE-862
TI-2024-04520 CVE-2024-4860 · GHSA-p7q5-4hfm-m8fh

Cross-site scripting in wp-rss-aggregator

Priority LOW 27

The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS) vulnerability due to the lack of sanitization of the 'notice_id' GET parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00382 Published 2024-05-14 Fixed in 4.23.9 CWE-79
TI-2024-06141 CVE-2024-6621 · GHSA-p2qj-v66f-rh5f

WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update

Priority LOW 20

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprss_activate_feed_source' an…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00386 Published 2024-07-16 No fix listed CWE-862
Open these records in search →