--- title: "Themeisle rss aggregator by feedzy vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/themeisle/rss-aggregator-by-feedzy type: product description: "Themeisle rss aggregator by feedzy has 9 published CVEs, 0 in CISA KEV and 2 with public exploits." updated: 2024-04-17 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Themeisle rss aggregator by feedzy vulnerabilities Vendor: [Themeisle](https://radicalnotion.ai/vendor/themeisle) - **Published CVEs:** 9 - **In CISA KEV:** 0 - **With a public exploit:** 2 - **With a patch:** 9 - **Average CVSS:** 6.0 - **First CVE:** 2023-01-30 - **Latest CVE:** 2024-04-17 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 0 | | High | 1 | | Medium | 8 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 3 | | [CWE-862](https://radicalnotion.ai/cwe/cwe-862) | Missing Authorization | 2 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 1 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 1 | | [CWE-89](https://radicalnotion.ai/cwe/cwe-89) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 1 | | [CWE-918](https://radicalnotion.ai/cwe/cwe-918) | Server-Side Request Forgery (SSRF) | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2023 | 2 | | 2024 | 7 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | \< 4.3.3 | range | 2 | | \<= 4.4.2 | range | 2 | | \< 4.1.1 | range | 1 | | \< 4.3.4 | range | 1 | | \< 4.4.8 | range | 1 | | \<= 3.4.2 | range | 1 | | \<= 4.4.1 | range | 1 | | 4.3.3 | patched | 2 | | 4.1.1 | patched | 1 | | 4.3.4 | patched | 1 | | 4.4.8 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2023-6805 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator \<= 4.4.7 - Authenticated(Contributor+) Blind Server-Side Request Forgery (SSRF) | medium | 6.4 | No | No | Yes | | CVE-2023-6877 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator \<= 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Error Message | medium | 6.4 | No | No | Yes | | CVE-2024-1317 | RSS Aggregator by Feedzy \<= 4.4.2 - Authenticated(Contributor+) SQL Injection | high | 8.8 | No | No | Yes | | CVE-2024-1318 | RSS Aggregator by Feedzy \<= 4.4.2 - Missing Authorization to Arbitrary Page Creation and Publication | medium | 6.5 | No | No | Yes | | CVE-2024-1092 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator \<= 4.4.1 - Missing Authorization | medium | 4.3 | No | No | Yes | | CVE-2023-6798 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator \<= 4.3.2 - Missing Authorization | medium | 5.4 | No | No | Yes | | CVE-2023-6801 | RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator \<= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting | medium | 6.4 | No | No | Yes | | CVE-2020-36758 | RSS Aggregator by Feedzy \<= 3.4.2 - Cross-Site Request Forgery Bypass | medium | 4.3 | No | Yes | Yes | | CVE-2022-4667 | RSS Aggregator by Feedzy \< 4.1.1 - Contributor+ Stored XSS | medium | 5.4 | No | Yes | Yes | ## Frequently asked questions ### How many CVEs does Themeisle rss aggregator by feedzy have? Themeisle rss aggregator by feedzy has 9 published CVE records since 2023. ### How many Themeisle rss aggregator by feedzy CVEs are in CISA KEV? None of Themeisle rss aggregator by feedzy's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Themeisle rss aggregator by feedzy vulnerabilities? Yes — 2 of Themeisle rss aggregator by feedzy's CVEs have a known public exploit. ### Which versions of Themeisle rss aggregator by feedzy are affected? 11 distinct Themeisle rss aggregator by feedzy versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Themeisle rss aggregator by feedzy CVEs? Themeisle rss aggregator by feedzy's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-284 (Improper Access Control), CWE-352 (Cross-Site Request Forgery (CSRF)). ### What is the average severity of Themeisle rss aggregator by feedzy CVEs? The average CVSS base score across Themeisle rss aggregator by feedzy's scored CVEs is 6.0. ## Other products from this vendor - [RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator](https://radicalnotion.ai/vendor/themeisle/rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-and-youtube-video-feeds-aggregator) (17 CVEs) - [orbit fox](https://radicalnotion.ai/vendor/themeisle/orbit-fox) (15 CVEs) - [Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More](https://radicalnotion.ai/vendor/themeisle/orbit-fox-duplicate-page-menu-icons-svg-support-cookie-notice-custom-fonts-and-more) (14 CVEs) - [multiple page generator](https://radicalnotion.ai/vendor/themeisle/multiple-page-generator) (11 CVEs) - [Multiple Page Generator Plugin – MPG](https://radicalnotion.ai/vendor/themeisle/multiple-page-generator-plugin-mpg) (11 CVEs) - [Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE](https://radicalnotion.ai/vendor/themeisle/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-and-fse) (11 CVEs) - [otter blocks](https://radicalnotion.ai/vendor/themeisle/otter-blocks) (10 CVEs) - [Redirection for Contact Form 7](https://radicalnotion.ai/vendor/themeisle/redirection-for-contact-form-7) (9 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/themeisle/rss-aggregator-by-feedzy). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.