CVE-2020-36758

creationtimestamp| type| source ---|---|--- 2023-10-20 12:35:07+00:00| seen| https://t.me/cibsecurity/72650...

CVE-2020-36758 RSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass

The RSS Aggregator by Feedzy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.2. This is due to missing or incorrect nonce validation on the savefeedzyposttypemeta function. This makes it possible for unauthenticated attackers to update post...

CVE-2020-36758

The CVE refers to the WordPress RSS Aggregator by Feedzy plugin. Affected: WordPress RSS Aggregator by Feedzy plugin for WordPress (plugin version ≤ 3.4.2). Issue: Cross-Site Request Forgery due to missing or incorrect nonce validation on the function save_feedzy_post_type_meta(). Impact: unauthe...