Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

WordPress Plugin RSS Aggregator by Feedzy Cross-Site Request Forgery Vulnerability

šŸ—“ļøĀ 20 Oct 2023Ā 00:00:00Reported byĀ China National Vulnerability Database of Information SecurityTypeĀ 
cnnvd
Ā cnnvdšŸ”—Ā www.cnnvd.org.cnšŸ‘Ā 2Ā Views

CSRF flaw in WordPress Plugin RSS Aggregator by Feedzy due to random validation in metadata save.

Related
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2020-36758
20 Oct 202312:35
ā€“circl
CVE		CVE-2020-36758
20 Oct 202307:29
ā€“cve
Cvelist		CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass
20 Oct 202307:29
ā€“cvelist
EUVD		EUVD-2020-24199
7 Oct 202500:30
ā€“euvd
NVD		CVE-2020-36758
20 Oct 202308:15
ā€“nvd
OSV		CVE-2020-36758
20 Oct 202308:15
ā€“osv
Prion		Cross site request forgery (csrf)
20 Oct 202308:15
ā€“prion
RedhatCVE		CVE-2020-36758
22 May 202517:37
ā€“redhatcve
Vulnrichment		CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass
20 Oct 202307:29
ā€“vulnrichment
SourceLink
pluginswww.plugins.trac.wordpress.org/changeset/2369394/feedzy-rss-feeds/trunk/includes/admin/feedzy-rss-feeds-admin.php
blogwww.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blogwww.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
blogwww.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
blogwww.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blogwww.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blogwww.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
wordfencewww.wordfence.com/threat-intel/vulnerabilities/id/e3b916dc-3b94-4319-a805-0ea99d14429f
blogwww.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
cxsecuritywww.cxsecurity.com/cveshow/CVE-2020-36758/
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jan 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.14.3
EPSS0.00397
SSVC
WordPressFeedzy PluginRSS AggregatorCross Site ForgeryMetadata Save Function
2