cleantalk
Vulnerabilities and Security Researches

RSS Manager, CVE-2025-39418

CVE, Research URL

CVE-2025-39418

Home page URL

Security reports for RSS Manager

Application

RSS Manager

Published on
Apr 17, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in ajayver RSS Manager allows Stored XSS. This issue affects RSS Manager: from n/a through 0.06.
Affected versions
Min -, max 0.06.
Status
vulnerable
Previous vulnerability researches
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout (CVE-2025-24558) , Feb 16, 2025
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout (CVE-2024-12443) , Dec 18, 2024
CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout (CVE-2025-39558) , Apr 19, 2025
New vulnerability
WP Simple Booking Calendar (CVE-2025-39541) , Apr 20, 2025
WordPress Job Board and Recruitment Plugin – JobWP (CVE-2025-2010) , Apr 20, 2025
WP Logger (CVE-2025-39456) , Apr 20, 2025
visualslider Sldier (CVE-2025-23448) , Apr 20, 2025
RSS Manager (CVE-2025-39418) , Apr 20, 2025