Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

rebelcode vulnerabilities

11 published CVEs name rebelcode among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    sebet · Go Fetch Jobs (for WP Job Manager)

    Medium6.1
  • CVE-2026-2433

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    Medium6.1
  • CVE-2026-1216

    RSS Aggregator <= 5.0.10 - Reflected Cross-Site Scripting via 'template' Parameter

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    High7.2
  • CVE-2025-14745

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via wp-rss-aggregator Shortcode

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    Medium6.4
  • CVE-2025-14375

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    Medium6.1
  • CVE-2025-26758

    WordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

    RebelCode · Spotlight Social Media Feeds

    Medium5.3
  • CVE-2024-9583

    RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 4.23.12 - Missing Authorization

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    Medium4.3
  • CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

    Medium6.3
  • CVE-2024-6621

    WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update

    rebelcode · RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging

    Medium4.3
  • CVE-2024-31381

    WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

    RebelCode · Spotlight Social Media Feeds

    Medium4.3
All 11 in the list