CVE-2024-9583

The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprssajaxsendpremiumsupport function in all versions up to, and including, 4.23.12. This makes it possible f...

CVE-2024-9583

CVE-2024-9583 affects the WordPress plugin “RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging” up to version 4.23.12. The issue is a missing capability check in the wprss_ajax_send_premium_support function, enabling authenticated users with Subscriber-level access and above ...

PT-2024-39700 · WordPress · The Rss Aggregator – Rss Import

Name of the Vulnerable Software and Affected Versions: The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress versions up to, and including, 4.23.12 Description: The issue is related to a missing capability check on the wprss ajax send premium support...