Skip to contentEtruel Wpematico Rss Feed Fetcher vulnerabilities
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_category' ParameterCVE-2026-1205736.4 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content ImportCVE-2026-1102525.4 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed ImportCVE-2026-890066.8 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign PreviewCVE-2026-890034.1 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign SettingsCVE-2026-890014.9 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign RunCVE-2026-890004.1 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to CategoryCVE-2026-890056.8 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDORCVE-2026-890042.7 Low
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item PreviewCVE-2026-890026.8 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_actionCVE-2026-198838.8 High
- etruel wpematico rss feed fetcherWordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.17 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-573497.1 High
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSSCVE-2025-130315.9 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feedCVE-2025-119176.4 Medium
- etruel wpematico rss feed fetcherWordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.3 - Broken Access Control vulnerabilityCVE-2025-499224.3 Medium
- etruel wpematico rss feed fetcherWordPress WPeMatico RSS Feed Fetcher Plugin <= 2.8.10 - Sensitive Data Exposure VulnerabilityCVE-2025-579374.3 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher <= 2.8.7 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission FunctionCVE-2025-81034.3 Medium
- etruel wpematico rss feed fetcherWPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site ScriptingCVE-2021-247934.8 Medium