Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: themeisle Component: Rss Aggregator By Feedzy Clear all filters
TI-2023-06217 CVE-2023-6805 · GHSA-x245-wv5c-hr8q

Server-side request forgery in themeisle RSS Aggregator by Feedzy – Feed to Post…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 4.4.7 via the…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-04-17 No fix listed CWE-918
TI-2023-06282 CVE-2023-6877 · GHSA-3xp5-393r-g6q2

Cross-site scripting in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2024-04-07 No fix listed CWE-79
TI-2024-01226 CVE-2024-1317 · GHSA-4xx5-qm5g-p5ph

RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection

Priority MEDIUM 41

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to SQL Injection via the ‘search_key’ parameter in all versions up to, and including, 4.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00708 Published 2024-02-20 No fix listed CWE-89
TI-2024-01227 CVE-2024-1318 · GHSA-58f3-9f67-m3m5

RSS Aggregator by Feedzy <= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication

Priority LOW 29

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'feedzy_wi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2024-02-20 No fix listed CWE-862
TI-2024-01012 CVE-2024-1092 · GHSA-gfj2-m63m-4q89

Improper access control in themeisle RSS Aggregator by Feedzy – Feed to Post…

Priority LOW 20

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the feedzy dashbo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0045 Published 2024-02-05 No fix listed CWE-284
TI-2023-06211 CVE-2023-6798 · GHSA-v6j3-rjpw-2fq5

Missing authorization in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 24

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check when updating settings…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00285 Published 2024-01-06 No fix listed CWE-862
TI-2023-06213 CVE-2023-6801 · GHSA-c5q5-jqjx-xv25

Cross-site scripting in themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging…

Priority LOW 28

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00313 Published 2024-01-06 No fix listed CWE-79
TI-2022-04265 CVE-2022-4667 · GHSA-rr97-c769-66wm

RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perf…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00507 Published 2023-01-30 Fixed in 4.1.1 CWE-79