Feedzy
Monthly
Server-side request forgery (SSRF) in the Feedzy WordPress plugin version 5.2.4 and below allows authenticated contributors to craft malicious RSS feed URLs, leading to unauthorized requests to internal or external resources. This could disclose limited internal service information or allow low-integrity modifications, but exploitation requires high attack complexity and contributor-level access. No active exploitation or public proof-of-concept has been identified at the time of analysis.
Server-side request forgery (SSRF) in the Feedzy WordPress plugin version 5.2.4 and below allows authenticated contributors to craft malicious RSS feed URLs, leading to unauthorized requests to internal or external resources. This could disclose limited internal service information or allow low-integrity modifications, but exploitation requires high attack complexity and contributor-level access. No active exploitation or public proof-of-concept has been identified at the time of analysis.