Skip to content
OpenAdvisories

Product · evigeo

WP Filter & Combine RSS Feeds

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.3

    WP Filter & Combine RSS Feeds <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion

    The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the post_listing_page() function in all versions up to, and including, 0.4. This makes it possible for authenticated…