CVE-2020-36758

🗓️ 20 Oct 2023 08:15:11Reported by [email protected]Type

The Feedzy plugin for WordPress (up to version 3.4.2) is vulnerable to Cross-Site Request Forgery due to missing nonce validation, allowing unauthenticated attackers to update post meta

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-36758	20 Oct 202312:35	–	circl
CNNVD	WordPress Plugin RSS Aggregator by Feedzy Cross-Site Request Forgery Vulnerability	20 Oct 202300:00	–	cnnvd
CVE	CVE-2020-36758	20 Oct 202307:29	–	cve
Cvelist	CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	cvelist
EUVD	EUVD-2020-24199	7 Oct 202500:30	–	euvd
OSV	CVE-2020-36758	20 Oct 202308:15	–	osv
Prion	Cross site request forgery (csrf)	20 Oct 202308:15	–	prion
RedhatCVE	CVE-2020-36758	22 May 202517:37	–	redhatcve
Vulnrichment	CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	vulnrichment

NVD

Node

themeisle rss_aggregator_by_feedzyRange≤3.4.2wordpress

Source	Link
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e3b916dc-3b94-4319-a805-0ea99d14429f
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
plugins	www.plugins.trac.wordpress.org/changeset/2369394/feedzy-rss-feeds/trunk/includes/admin/feedzy-rss-feeds-admin.php
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/

08 Apr 2026 19:17Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.14.3

EPSS0.00397

CWE-352