Lucene search
+L

542 matches found

Cvelist
Cvelist
added 2026/01/16 7:23 a.m.42 views

CVE-2025-14375 RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 5.0.10 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS0.00179EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.13 views

WordPress Plugin: RSS Aggregator – Includes RSS Import, News Feeds, Feed to Post, and Autoblogging. Cross-site scripting vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.1CVSS5.8AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.27 views

PT-2026-3228

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 5.0.10 due to insufficient input sanitization and output escaping. This makes it...

6.1CVSS5.6AI score0.00179EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:30 a.m.18 views

CVE-2019-16564

Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does not escape information shown on its view, resulting in a stored XSS vulnerability exploitable by attackers able to affects view content such as job display name or pipeline stage names...

5.4CVSS5.7AI score0.00688EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 3:13 a.m.12 views

CVE-2025-11467

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzylazyload function. This makes it possible for unauthenticated attacker...

5.8CVSS5.9AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/11 1:55 a.m.45 views

CVE-2025-11467 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzylazyload function. This makes it possible for unauthenticated attacker...

5.8CVSS0.00259EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/11 1:55 a.m.6 views

CVE-2025-11467 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzylazyload function. This makes it possible for unauthenticated attacker...

5.8CVSS5.5AI score0.00259EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/11 1:55 a.m.40 views

CVE-2025-11467

CVE-2025-11467 affects the WordPress plugin “RSS Aggregator by Feedzy” (Feedzy RSS/Feedzy RSS Feeds). The vulnerability is a Blind Server-Side Request Forgery in the feedzy_lazy_load function, exploitable in all versions up to and including 5.1.1. It allows unauthenticated attackers to issue web ...

5.8CVSS5.5AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.11 views

PT-2025-50568

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzy lazy load function. This makes it possible for unauthenticated...

5.8CVSS5.9AI score0.00259EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/08 8:20 p.m.7 views

Malicious code in db-aggregator-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7.1AI score
SaveExploits0References2
OSV
OSV
added 2025/11/08 8:20 p.m.6 views

MAL-2025-191713 Malicious code in db-aggregator-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aed54ed734902c1a5749b7861e2ad95cc2d8c71c78fa4b0167499f9a1b296f9f Importing the module downloads and starts an infostealer. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

7AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/24 12:33 p.m.10 views

CVE-2025-11128

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.1.0 via the 'feedzysanitizefeeds' function. This makes it possible for authenticated attackers...

5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/23 12:00 a.m.11 views

WordPress plugin RSS Aggregator by Feedzy 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin RSS...

5CVSS6.9AI score0.00273EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2012-0852

Malware in sbrugna...

6.8CVSS6.1AI score0.00922EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-4378

Malware in sbrugna...

6.8CVSS6.4AI score0.00649EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-3024

Malware in sbrugna...

7.5CVSS6.4AI score0.00969EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2008-2877

Malware in sbrugna...

9.3CVSS6.4AI score0.03165EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.18 views

EUVD-2021-11900

Malware in sbrugna...

5.4CVSS5.4AI score0.00292EPSS
SaveExploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-13954

Malware in sbrugna...

7.5CVSS7.5AI score0.01804EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.22 views

EUVD-2004-2614

Malware in sbrugna...

10CVSS6.4AI score0.01874EPSS
SaveExploits0References7
Rows per page
Query Builder