Log out
Get PRO

Latest

Access violation vulnerability in WP Filter & Combine RSS Feeds 0.4

  • Severity: medium-risk
  • Status: Open
  • Publication: August 22, 2025

The WordPress plugin called “WP Filter & Combine RSS Feeds” has a security issue that could allow someone to change data without permission. This happens because the post_listing_page() function doesn’t have a check to make sure the user has the right capabilities. This means that someone who is logged in and has Contributor level access or higher could delete RSS feeds without permission.

Detected in:

WP Filter & Combine RSS Feeds open vulnerable versions: >= * <= 0.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.