CVE-2025-14375 | RSS Aggregator Plugin up to 5.0.10 on WordPress className cross site scripting

January 15, 2026 Yanac

A vulnerability was found in RSS Aggregator Plugin up to 5.0.10 on WordPress and classified as problematic. The impacted element is an unknown function. The manipulation of the argument className results in cross site scripting.

This vulnerability is identified as CVE-2025-14375. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More