PT-2025-50568 · WordPress · Feedzy Rss Aggregator

Lucas Montes · Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-11467

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Feedzy RSS Aggregator plugin for WordPress versions up to and including 5.1.1

Description The Feedzy RSS Aggregator plugin for WordPress is susceptible to a Blind Server-Side Request Forgery (SSRF) issue. This allows unauthenticated attackers to initiate web requests to arbitrary locations from the web application. Exploitation can lead to querying and modification of information from internal services.

Recommendations Update to version 5.1.2.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-11467

Affected Products

Feedzy Rss Aggregator

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-11467 · Security Note
• https://t.me/CVEtracker/39437 · Telegram Post
• https://twitter.com/VolerionSec/status/1998956149660397625 · Twitter Post
• https://t.me/cveNotify/145403 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999040432714432603 · Twitter Post
• https://plugins.trac.wordpress.org/browser/feedzy-rss-feeds/tags/5.1.0/includes/abstract/feedzy-rss-feeds-admin-abstract.php#L551 · Note
• https://twitter.com/CVEnew/status/1999108884397756625 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/5754dce7-6b47-4490-a04a-7eabfded0720?source=cve · Note