Feedpress Generator – External RSS Frontend Customizer

Feedpress Generator – External RSS Frontend Customizer has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 1 is fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Missing Authorization.

1 of the records (25%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2023.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage25%

Open

Fixed

Get automatic notifications for all Feedpress Generator – External RSS Frontend Customizer vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2024-54364

Feedpress Generator <= 1.2.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2024-12-11 00:00	Feedpress Generator <= 1.2.1 - Reflected Cross-Site Scripting Feedpress Generator <= 1.2.1	`CVE-2024-54364`	6.1 Medium	thiennv	No
2024-12-06 21:29	Feedpress Generator – External RSS Frontend Customizer <= 1.2.1 - Reflected Cross-Site Scripting Feedpress Generator <= 1.2.1	`CVE-2024-11457`	6.1 Medium	nvthien	No
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Feedpress Generator <= 1.2.0	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	No
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Feedpress Generator < 1.2.0	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–4 of 4 reports