Vulnerabilities > Rebelcode > RSS Aggregator > 4.23.12

DATE CVE VULNERABILITY TITLE RISK
2024-10-23 CVE-2024-9583 Missing Authorization vulnerability in Rebelcode RSS Aggregator
The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax_send_premium_support function in all versions up to, and including, 4.23.12.
network
low complexity
rebelcode CWE-862
5.4