Skip to contentRebelcode Rss Aggregator – Rss Import, News Feeds, Feed To Post, And Autoblogging vulnerabilities
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autobloggingRSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessageCVE-2026-24336.1 Medium
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autobloggingRSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' ParameterCVE-2026-12167.2 High
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autobloggingRSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator ShortcodeCVE-2025-147456.4 Medium
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autobloggingRSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via classNameCVE-2025-143756.1 Medium
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 moreRSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing AuthorizationCVE-2024-95834.3 Medium
- rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging, rss aggregator +1 moreWP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State UpdateCVE-2024-66214.3 Medium
- wprssaggregator wp rss aggregator, rebelcode rss aggregator – rss import, news feeds, feed to post, and autoblogging +1 moreWP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed SourceCVE-2024-06304.4 Medium