CVE-2025-11128 | Feedzy RSS Aggregator Plugin up to 5.1.0 on WordPress feedzy_sanitize_feeds server-side request forgery

A vulnerability was found in Feedzy RSS Aggregator Plugin up to 5.1.0 on WordPress. It has been declared as critical. This affects the function feedzy_sanitize_feeds. Executing manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2025-11128. It is possible to launch the attack remotely. No exploit is available.