Feedzy RSS Aggregator < 5.2.6 Authorization Bypass Leading to Arbitrary Post Deletion (CVE-2026-18934)

wpscan.com 2026-08-10查看中文 →

Security AdvisoryCVE-2026-18934MediumFeedzy

Affected:

RSS Aggregator by Feedzy < 5.2.6

Fixed in:

5.2.6

Referenced CVEs: CVE-2026-18934

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Manual Image Crop < 1.15 Subscriber+ IDOR Arbitrary Attachment Image Overwrite via IDOR 2026-08-16 Visualizer <4.0.7 Contributor+ Broken Access Control Disclosure Chart Config/Credentials (CVE-2026-19726) 2026-08-16 WP Directory Kit < 1.5.7 Admin+ SQL Injection via section Parameter (CVE-2026-18653) 2026-08-16 ECS < 4.3.10 Contributor+ Arbitrary Post Meta Disclosure (CVE-2026-19613) 2026-08-16 WooCommerce Extra Product Options Builder Unauthenticated File Disclosure (CVE-2026-19728) 2026-08-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive