PatchTheCVErss aggregator vulnerabilities and fixes
Recent CVEs affecting rss aggregator, with upgrade or downgrade steps. 3 tracked.
Also searched as: rssaggregator.
rss aggregator has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-10-23. Highest priority: CVE-2024-4860 (score 32/100).
- CVE-2024-9583 MEDIUM 4.3 UPGRADE The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable
- CVE-2024-6621 MEDIUM 4.3 UPGRADE The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable
- CVE-2024-4860 MEDIUM 5.4 UPGRADE The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS
FAQ
How do I fix rss aggregator vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rss aggregator being exploited right now?
None of the tracked rss aggregator CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rss aggregator CVE should I patch first?
CVE-2024-4860 currently ranks highest (32/100): The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS.