Known vulnerabilities in the Wp Rss Aggregator plugin
10 security advisories have been published for the Wp Rss Aggregator plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2026-2433) MEDIUM
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2026-1216) HIGH
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2025-14745) MEDIUM
- Wp Rss Aggregator - Broken Access Control (CVE-2024-9583) MEDIUM
- Wp Rss Aggregator - Broken Access Control (CVE-2024-6621) MEDIUM
- Wp Rss Aggregator - Server-Side Request Forgery (SSRF) (CVE-2024-0628) LOW
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2024-0630) MEDIUM
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2022-0189) MEDIUM
- Wp Rss Aggregator - Broken Access Control (CVE-2021-24988) MEDIUM
- Wp Rss Aggregator - Cross-Site Scripting (XSS) (CVE-2021-24768) MEDIUM