PT-2026-1477
CVE-2025-69349
·
Published
2026-01-06
·
Updated
2026-10-07
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Fahad Mahmood RSS Feed Widget versions through 3.0.2
Description
An issue exists in Fahad Mahmood RSS Feed Widget related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check.
Recommendations
Update Fahad Mahmood RSS Feed Widget to a version later than 3.0.2.
Found an issue in the description? Have something to add? Feel free to write us 👾