CVE

CVE-2026-2433 — RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 5.0.12 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-2433 RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging < 5.0.12 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage Unknown < 5.0.12 5.0.12

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.