CVE-2026-2433 | RSS Aggregator Plugin up to 5.0.11 on WordPress admin-shell.js postMessage cross site scripting

A vulnerability categorized as problematic has been discovered in RSS Aggregator Plugin up to 5.0.11 on WordPress. Affected is the function postMessage of the file admin-shell.js. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-2433. The attack can be executed remotely. There is not any exploit available.