Category Specific RSS feed Subscription

Category Specific RSS feed Subscription has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for Category Specific RSS feed Subscription has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by yuyudhn.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Category Specific RSS feed Subscription vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2019-5993

Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records


2023-04-19 00:00	Category Specific RSS feed Subscription <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings Category Specific RSS feed Subscription <= 2.2	`CVE-2023-22685`	4.4 Medium	yuyudhn	Yes
2023-01-20 00:00	Category Specific RSS feed Subscription <= 2.1 - Cross-Site Request Forgery Category Specific RSS feed Subscription < 2.2	`CVE-2023-22691`	4.3 Medium	yuyudhn	Yes
2019-07-18 00:00	Category Specific RSS Feed Subscription <= 2.0 - Cross-Site Request Forgery Category Specific RSS feed Subscription <= 2.0	`CVE-2019-5993`	8.8 High	Gota Abe of Cryptography Laboratory	Yes

Showing 1–3 of 3 reports