https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-9583.htmlhttps://patchthecve.com/cve/CVE-2024-9583.htmlWed, 17 Jun 2026 08:24:52 +0000MEDIUM 4.3: The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax_send_premium_support function in all versions up to, and including, 4.23.12. This makes it possible https://patchthecve.com/cve/CVE-2024-6621.htmlhttps://patchthecve.com/cve/CVE-2024-6621.htmlWed, 17 Jun 2026 08:18:22 +0000MEDIUM 4.3: The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprss_activate_feed_source' and 'wprss_pause_feed_source' functions in all versions up to, and including, 4.23https://patchthecve.com/cve/CVE-2024-4860.htmlhttps://patchthecve.com/cve/CVE-2024-4860.htmlWed, 17 Jun 2026 08:03:03 +0000MEDIUM 5.4: The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS) vulnerability due to the lack of sanitization of the  'notice_id'  GET parameter.