CVE-2024-6621

CVE-2024-6621 affects the WordPress plugin “WP RSS Aggregator” (RSS Import, News Feeds, Feed to Post, Autoblogging). The vulnerability is due to a missing capability check in the functions wprss_activate_feed_source and wprss_pause_feed_source, allowing authenticated attackers with Subscriber-lev...

CVE-2024-4860

CVE-2024-4860 affects the WordPress plugin RSS Aggregator (WP RSS Aggregator) for versions < 4.23.9. The issue is a Cross‑Site Scripting (XSS) vulnerability caused by insufficient sanitization of the notice_id GET parameter. Connected sources confirm the detail and note the specific affected r...

CVE-2024-9583

CVE-2024-9583 affects the WordPress plugin “RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging” up to version 4.23.12. The issue is a missing capability check in the wprss_ajax_send_premium_support function, enabling authenticated users with Subscriber-level access and above ...