Rebelcode vulnerabilities

Products

• Rss Aggregator – Rss Import, News Feeds, Feed To Post, And Autoblogging 7
• Rss Aggregator 3
• Spotlight Social Feeds – Block, Shortcode, And Widget 2
• Spotlight Social Media Feeds 2

Newest

• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage CVE-2026-2433 6.1 MediumMarch 7, 2026
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter CVE-2026-1216 7.2 HighFebruary 17, 2026
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode CVE-2025-14745 6.4 MediumJanuary 23, 2026
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className CVE-2025-14375 6.1 MediumJanuary 16, 2026
• rebelcode spotlight social media feeds WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability CVE-2025-26758 5.3 MediumFebruary 17, 2025
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 more RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization CVE-2024-9583 4.3 MediumOctober 23, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 more WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update CVE-2024-6621 4.3 MediumJuly 16, 2024
• rebelcode rss aggregator The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site... CVE-2024-4860 5.4 MediumMay 14, 2024
• rebelcode spotlight social media feeds WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31381 4.3 MediumApril 15, 2024
• wprssaggregator wp rss aggregator, rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging +1 more WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source CVE-2024-0630 4.4 MediumFebruary 5, 2024
• rebelcode spotlight social feeds, unknown spotlight social feeds [block, shortcode, and widget] +1 more Spotlight Social Feeds < 1.4.3 - Contributor+ Stored XSS CVE-2023-0379 5.4 MediumFebruary 13, 2023