RA
Vendor
rachelos
6
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111687 | WE we-mp-rss rachelos | 9.8 | Oct 16 | WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint |
| CVE-2026-110617 | WE we-mp-rss rachelos | 4.8 | Oct 14 | we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint |
| CVE-2026-2825 | WW WeRSS we-mp-rss rachelos | 3.5 | Feb 20 | rachelos WeRSS we-mp-rss Article fix.py fix_html cross site scripting |
| CVE-2026-2216 | WW WeRSS we-mp-rss rachelos | 4.3 | Feb 9 | rachelos WeRSS we-mp-rss tools.py download_export_file path traversal |
| CVE-2026-2215 | WW WeRSS we-mp-rss rachelos | 3.7 | Feb 9 | rachelos WeRSS we-mp-rss JWT auth.py default key |
| CVE-2025-13174 | WW WeRSS we-mp-rss rachelos | 6.3 | Nov 14 | rachelos WeRSS we-mp-rss Webhook mps.py do_job server-side request forgery |