Read the docs

themeisle

Records136All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9

Exploited now

themeisle records in CISA KEV

No themeisle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orbit Fox 15 records LOW Multiple Page Generator 10 records MEDIUM Otter Blocks 10 records LOW Rss Aggregator By Feedzy 9 records MEDIUM Visualizer 7 records HIGH Product Addons & Fields For Woocommerce 4 records MEDIUM Cloud Templates & Patterns Collection 1 record LOW Google Maps Plugin By Intergeo 1 record LOW

Records

9 records in Rss Aggregator By Feedzy · all components

TI-2022-04265 CVE-2022-4667 · GHSA-rr97-c769-66wm

RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perf…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00507 Published 2023-01-30 Fixed in 4.1.1 CWE-79
TI-2024-01226 CVE-2024-1317 · GHSA-4xx5-qm5g-p5ph

RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection

Priority MEDIUM 41

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘search_key’ parameter in all versions up to, and including, 4.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00708 Published 2024-02-20 No fix listed CWE-89
TI-2024-01227 CVE-2024-1318 · GHSA-58f3-9f67-m3m5

RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication

Priority LOW 29

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'feedzy_wi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2024-02-20 No fix listed CWE-862
TI-2023-06282 CVE-2023-6877 · GHSA-3xp5-393r-g6q2

Cross-site scripting in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-04-07 No fix listed CWE-79
TI-2023-06217 CVE-2023-6805 · GHSA-x245-wv5c-hr8q

Server-side request forgery in themeisle RSS Aggregator by Feedzy – Feed to Post…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-04-17 No fix listed CWE-918
TI-2023-06213 CVE-2023-6801 · GHSA-c5q5-jqjx-xv25

Cross-site scripting in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00313 Published 2024-01-06 No fix listed CWE-79
TI-2023-06211 CVE-2023-6798 · GHSA-v6j3-rjpw-2fq5

Missing authorization in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 24

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check when updating settings…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00285 Published 2024-01-06 No fix listed CWE-862
TI-2024-01012 CVE-2024-1092 · GHSA-gfj2-m63m-4q89

Improper access control in themeisle RSS Aggregator by Feedzy – Feed to Post…

Priority LOW 20

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the feedzy dashbo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0045 Published 2024-02-05 No fix listed CWE-284
Open these records in search →