Wpematico Rss Feed Fetcher (Unknown) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-27. Vendor: Unknown.

CVEs of Wpematico Rss Feed Fetcher

CVE-2026-89006 - CVSS 6.8 (medium), 2026-09-27: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with…
CVE-2026-89003 - CVSS 4.1 (medium), 2026-09-27: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the…
CVE-2026-89001 - CVSS 4.9 (medium), 2026-09-27: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to…
CVE-2026-89000 - CVSS 4.1 (medium), 2026-09-27: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL…
CVE-2026-89005 - CVSS 6.8 (medium), 2026-09-24: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is…
CVE-2026-89004 - CVSS 2.7 (low), 2026-09-24: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration…
CVE-2026-89002 - CVSS 6.8 (medium), 2026-09-24: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering…
CVE-2025-13031 - CVSS 5.9 (medium), 2025-12-09: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such…
CVE-2021-24793 - CVSS 4.8 (medium), 2021-11-01: The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing…