Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| rebelcode | RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging | unaffected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-47682 | The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wprss_activate_feed_source' and 'wprss_pause_feed_source' functions in all versions up to, and including, 4.23.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or pause existing RSS feeds. |
Fri, 10 Apr 2026 04:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 08 Apr 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-862 |
Wed, 07 Aug 2024 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Rebelcode
Rebelcode rss Aggregator |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:rebelcode:rss_aggregator:*:*:*:*:*:wordpress:*:* | |
| Vendors & Products |
Rebelcode
Rebelcode rss Aggregator |
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-04-08T17:06:17.989Z
Reserved: 2024-07-09T15:57:47.785Z
Link: CVE-2024-6621
Vulnrichment
Updated: 2024-08-01T21:41:04.059Z
NVD
Status : Modified
Published: 2024-07-16T11:15:10.357
Modified: 2026-04-08T18:22:24.693
Link: CVE-2024-6621
Redhat
No data.
OpenCVE Enrichment
No data.