CVE-2020-36758

🗓️ 20 Oct 2023 08:15:11Reported by GoogleType

osv🔗 osv.dev👁 2 Views

CVE-2020-36758: RSS Aggregator plugin vulnerable to cross site forgery via missing nonce validation, enabling unauthenticated post meta updates.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-36758	20 Oct 202312:35	–	circl
CNNVD	WordPress Plugin RSS Aggregator by Feedzy Cross-Site Request Forgery Vulnerability	20 Oct 202300:00	–	cnnvd
CVE	CVE-2020-36758	20 Oct 202307:29	–	cve
Cvelist	CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	cvelist
EUVD	EUVD-2020-24199	7 Oct 202500:30	–	euvd
NVD	CVE-2020-36758	20 Oct 202308:15	–	nvd
Prion	Cross site request forgery (csrf)	20 Oct 202308:15	–	prion
RedhatCVE	CVE-2020-36758	22 May 202517:37	–	redhatcve
Vulnrichment	CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	vulnrichment

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e3b916dc-3b94-4319-a805-0ea99d14429f
plugins	www.plugins.trac.wordpress.org/changeset/2369394/feedzy-rss-feeds/trunk/includes/admin/feedzy-rss-feeds-admin.php
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/

04 May 2026 08:34Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.14.3

EPSS0.00397