WordPress plugin
WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium11
- Low1
All WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Reflected Cross-Site Scripting via 'template' Parameter ≤5.0.10Update to 5.0.11 | CVE-2026-1216 |
- High7.2Reflected Cross-Site Scripting via 'template' Parameter
≤5.0.10Update to 5.0.11
WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content: common questions
Does WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content: 1 high, 11 medium, 1 low. None are known to affect version null.
How do I check which version of WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content vulnerability?
CVE-2026-2433, published Mar 6, 2026: RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage. Severity: Medium (CVSS 6.1).
Is any WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content vulnerability listed in CISA KEV?
No. None of the known WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content vulnerabilities is currently listed in the CISA KEV catalog.