CVE Database /
CVE-2025-11128
CVE · Medium
CVE-2025-11128 — RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.1.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-11128
|
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.1.1 |
Server-Side Request Forgery (SSRF) |
Medium
5.0
|
< 5.1.1
|
5.1.1 |
2025-10-22 |
—
|
CVE-2025-11128
The Feedzy plugin for WordPress contains a flaw in its feed sanitization mechanism that allows authorized users with a certain level of access or higher to craft malicious URLs, which can then be used to probe internal systems connected to the website. This vulnerability affects all versions up to and including 5.1.0, allowing attackers to potentially extract sensitive information from within the network.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings