Plugin icon

WPeMatico RSS Feed Fetcher

wpematico

Vulnerabilities:

6

Last Updated:

June 30, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-11-18
Title
WPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSS
Fixed in
Fixed in 2.8.13
CVSS
5.9 (medium)
Published
2025-11-04
Title
WPeMatico RSS Feed Fetcher < 2.8.12 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed
Fixed in
Fixed in 2.8.12
CVSS
6.4 (medium)
Published
2025-09-22
Title
WPeMatico RSS Feed Fetcher < 2.8.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 2.8.11
CVSS
4.3 (medium)
Published
2025-07-25
Title
WPeMatico RSS Feed Fetcher < 2.8.8 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission Function
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)
Published
2025-05-29
Title
WPeMatico RSS Feed Fetcher < 2.8.4 - Missing Authorization
Fixed in
Fixed in 2.8.4
CVSS
4.3 (medium)
Published
2021-09-29
Title
WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.12
CVSS
3.5 (low)