CVE Database /
CVE-2026-13252
CVE · Medium
CVE-2026-13252 — RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.2.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-13252
|
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 5.2.2 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 5.2.2
|
5.2.2 |
2026-07-01 |
—
|
CVE-2026-13252
The Feedzy plugin for WordPress contains a security flaw allowing malicious users with contributor or higher permissions to embed unauthorized code into certain pages by exploiting the 'aspectRatio' attribute's lack of input validation and output protection, putting users at risk when accessing affected content. This vulnerability affects all versions up to 5.2.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings