CVE-2024-0630

🗓️ 05 Feb 2024 21:21:53Reported by WordfenceType

The WP RSS Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the RSS feed source in all versions up to, and including, 4.23.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-0630	5 Feb 202423:31	–	circl
CNNVD	WordPress plugin WP RSS Aggregator Security Vulnerability	5 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-0630 WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source	5 Feb 202421:21	–	cvelist
EUVD	EUVD-2024-16423	3 Oct 202520:07	–	euvd
NVD	CVE-2024-0630	5 Feb 202422:16	–	nvd
Patchstack	WordPress WP RSS Aggregator Plugin <= 4.23.4 is vulnerable to Cross Site Scripting (XSS)	26 Jan 202400:00	–	patchstack
Prion	Cross site scripting	5 Feb 202422:16	–	prion
RedhatCVE	CVE-2024-0630	23 May 202507:25	–	redhatcve
Vulnrichment	CVE-2024-0630 WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source	5 Feb 202421:21	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (January 22, 2024 to January 28, 2024)	1 Feb 202415:49	–	wordfence

NVD

Vulners

Node

wprssaggregator wp_rss_aggregatorRange≤4.23.4wordpress

[
  {
    "vendor": "rebelcode",
    "product": "RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.23.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/93cb3b29-b1a0-4d40-a057-1b41f3b181f2
plugins	www.plugins.trac.wordpress.org/changeset/3026269/wp-rss-aggregator

08 Apr 2026 18:18Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.4 - 4.8

EPSS0.00206

SSVC

CWE-79