Echo RSS Feed Post Generator vulnerabilities

2 known vulnerabilities in Echo RSS Feed Post Generator from CodeRevolution. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Echo RSS Feed Post Generator: Unrestricted Upload of File with Dangerous Type

  CVE-2025-4391May 17, 2025CodeRevolution

  The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthent

• 9.8 Critical severity

  Echo RSS Feed Post Generator: Improper Privilege Management

  CVE-2024-9265Oct 1, 2024CodeRevolution

  The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_h