CVE-2026-109207 | meIsle RSS Aggregator Plugin up to 5.2.11 on WordPress media:thumbnail@url cross site scripting

October 16, 2026 Yanac

A vulnerability was found in meIsle RSS Aggregator Plugin up to 5.2.11 on WordPress. It has been rated as problematic. Affected is an unknown function. This manipulation of the argument media:thumbnail@url causes cross site scripting.

This vulnerability is tracked as CVE-2026-109207. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More