WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content

The #1 WordPress RSS aggregator to quickly import RSS feeds, build a news aggregator, and for easy autoblogging.

13Reported vulnerabilities
7.2Highest CVSS score
5.4.0Latest version
40,000+Active installs

What to do now

Update WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content to 5.0.12 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-0189 Medium 6.1 2.2% Before 4.20 4.20 February 28, 2022
CVE-2024-4860 Medium 6.1 0.4% Before 4.23.9 4.23.9 May 14, 2024
CVE-2021-24988 Medium 5.4 0.3% Before 4.19.3 4.19.3 December 27, 2021
CVE-2021-24768 Medium 4.8 0.6% Before 4.19.2 4.19.2 November 29, 2021
CVE-2026-1216 High 7.2 0.2% 0 to 5.0.10 (inclusive) 5.0.11 February 17, 2026
WF-a46364f4-9258-4f5e-9d53-dcbaf726f2f0 Medium 6.5 — 4.6.3 and earlier 4.6.4 December 16, 2014
CVE-2025-14745 Medium 6.4 0.2% 0 to 5.0.10 (inclusive) 5.0.11 January 23, 2026
CVE-2026-2433 Medium 6.1 0.2% 0 to 5.0.11 (inclusive) 5.0.12 March 7, 2026
CVE-2025-14375 Medium 6.1 0.2% 0 to 5.0.10 (inclusive) 5.0.11 January 16, 2026
CVE-2024-9583 Medium 5.4 0.4% Before 4.23.13 4.23.13 October 23, 2024
CVE-2024-0630 Medium 4.8 0.4% 4.23.4 and earlier 4.23.5 February 5, 2024
CVE-2024-6621 Medium 4.3 0.4% Before 4.23.12 4.23.12 July 16, 2024
CVE-2024-0628 Low 3.8 0.4% 4.23.5 and earlier 4.23.6 February 7, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.