Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-22691 EUVD-2023-26820GHSA-pw2g-wqc9-f5g9

WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published May 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Tips and Tricks HQ, Ruhul Amin Product: Category Specific RSS feed Subscription

Description

Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.

Affected products

VendorProductAffectedFixed
Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription ≤ v2.1 —

References