rebelcode vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 20265

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-2433

  RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  Medium6.1
• CVE-2026-1216

  RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  High7.2
• CVE-2025-14745

  RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  Medium6.4
• CVE-2025-14375

  RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  Medium6.1
• CVE-2025-26758

  WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

  RebelCode · Spotlight Social Media Feeds

  Medium5.3
• CVE-2024-9583

  RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  Medium4.3
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-6621

  WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update

  rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

  Medium4.3
• CVE-2024-31381

  WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

  RebelCode · Spotlight Social Media Feeds

  Medium4.3