CVE-2026-110707 | meIsle RSS Aggregator Plugin up to 5.2.12 on WordPress Feed Import media:description cross site scripting

October 29, 2026 Yanac

A vulnerability labeled as problematic has been found in meIsle RSS Aggregator Plugin up to 5.2.12 on WordPress. Affected by this vulnerability is an unknown functionality of the component Feed Import. The manipulation of the argument media:description results in cross site scripting.

This vulnerability is known as CVE-2026-110707. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More