Access violation vulnerability in RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging 4.23.12

A popular plugin for WordPress, the RSS Aggregator, has a security vulnerability that could allow unauthorized use. This is because a necessary check was not in place for a specific function in all versions up to 4.23.12. This means that attackers with a Subscriber-level or higher access can send support requests with their own email address and subject line, pretending to be the site owner. This can also lead to the leakage of license information.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.