Unknown WPeMatico RSS Feed Fetcher

7 known vulnerabilities in Unknown WPeMatico RSS Feed Fetcher, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-89006 CVSS 6.8 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content…
  • CVE-2026-89003 CVSS 4.1 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and…
  • CVE-2026-89001 CVSS 4.9 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish…
  • CVE-2026-89000 CVSS 4.1 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a…
  • CVE-2026-89005 CVSS 6.8 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a…
  • CVE-2026-89004 CVSS 2.7 low The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's…
  • CVE-2026-89002 CVSS 6.8 medium The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied…