Beveiligingsadvies

CVE-2023-6798

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-06 09:38:36

Laatst bijgewerkt 2026-04-08 17:20:15

Toegewezen door Wordfence

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check when updating settings in all versions up to, and including, 4.3.2. This makes it possible for authenticated attackers, with author-level access or above to change the plugin's settings including proxy settings, which are also exposed to authors.

← Alle CVE's bekijken Bekijk op cve.org ↗