Approved changes feed: RSS · Atom

cpe:2.3:a:radgeek:feedwordpress:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRadgeek (bf096609-aa0b-524b-89cc-2960b2d02a6a)
ProductFeedwordpress (17912730-81c2-50c3-9ee4-49e77dd360ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0839 vulnerable 2026-06-08 06:22:02.963264 FeedWordPress <= 2022.0222 - Insecure Direct Object Referece
MEDIUM (5.3)
The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing validation on the user controlled 'guid' key. This makes it possible for unauthenticated attackers to view draft posts that may contain sensitive information.
Published: 2024-03-13T15:26:36.360Z
Updated: 2026-04-08T16:40:50.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.