CVE-2024-0628

A Server Side Request Forgery vulnerability was discovered in the WP RSS Aggregator plugin for WordPress prior to version 4.23.6 that could enable an attacker to manipulate a vulnerable website into making HTTP requests to arbitrary domains controlled by the attacker. By exploiting this flaw, an attacker might gain access to confidential data from internal services operating on the affected system. The vulnerability has been patched in version 4.23.6, and users should update their installations to this version or later.

Based on public CVE data (MITRE/NVD).