{"items":[{"id":"CVE-2024-13362","published":"2026-05-01T05:29:54.148Z","updated":"2026-05-01T13:23:26.723Z","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter","severity":"MEDIUM","score":6.1,"vendor":"sebet","product":"Go Fetch Jobs (for WP Job Manager)","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2026-2433","published":"2026-03-07T07:22:04.098Z","updated":"2026-04-08T16:45:01.018Z","title":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage","severity":"MEDIUM","score":6.1,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-1216","published":"2026-02-17T09:26:22.151Z","updated":"2026-04-08T16:50:05.895Z","title":"RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter","severity":"HIGH","score":7.2,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2025-14745","published":"2026-01-23T05:29:51.482Z","updated":"2026-04-08T17:27:58.203Z","title":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode","severity":"MEDIUM","score":6.4,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2025-14375","published":"2026-01-16T07:23:09.745Z","updated":"2026-04-08T16:47:38.674Z","title":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className","severity":"MEDIUM","score":6.1,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2025-26758","published":"2025-02-17T11:38:13.840Z","updated":"2026-04-28T16:11:40.056Z","title":"WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"RebelCode","product":"Spotlight Social Media Feeds","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2024-9583","published":"2024-10-23T06:45:05.657Z","updated":"2026-04-08T16:36:25.173Z","title":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization","severity":"MEDIUM","score":4.3,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2022-4974","published":"2024-10-16T06:43:30.014Z","updated":"2026-04-08T16:46:54.861Z","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks","severity":"MEDIUM","score":6.3,"vendor":"dashlabsltd","product":"YASR – Yet Another Star Rating Plugin for WordPress","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2024-6621","published":"2024-07-16T11:00:58.101Z","updated":"2026-04-08T17:06:17.989Z","title":"WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update","severity":"MEDIUM","score":4.3,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2024-31381","published":"2024-04-15T10:20:14.250Z","updated":"2026-04-28T16:09:32.040Z","title":"WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"RebelCode","product":"Spotlight Social Media Feeds","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2024-0630","published":"2024-02-05T21:21:53.514Z","updated":"2026-04-08T17:09:45.128Z","title":"WP RSS Aggregator <= 4.23.4 - Authenticated (Admin+) Stored Cross-Site Scripting via RSS Feed Source","severity":"MEDIUM","score":4.4,"vendor":"rebelcode","product":"RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging","kev":false,"epss":0.00381,"kevAdded":null}]}