CVE-2025-9894

Name of the Vulnerable Software and Affected Versions Sync Feedly plugin for WordPress versions prior to 1.0.2

Description The software is susceptible to a Cross-Site Request Forgery issue. This is due to a lack of proper nonce validation within the crsf cron job func function. An unauthenticated attacker could potentially trigger content synchronization from Feedly, which may lead to the creation of multiple posts if they can trick a site administrator into performing an action, such as clicking a link.

Recommendations Update the Sync Feedly plugin to version 1.0.2 or later.