WPeMatico RSS Feed Fetcher vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WR

Product

WPeMatico RSS Feed Fetcher

by · last CVE Sep 27, 2026

8

CVEs

0

On KEV

6.8

Max CVSS

0

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 0Medium 7Low 1

Severity

All severities8 Critical0 High0 Medium7 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WPeMatico RSS Feed Fetcher to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-89006	6.8	0%	Sep 27	WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import Affected: before 2.8.27
CVE-2026-89005	6.8	0%	Sep 24	WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category Affected: before 2.8.26
CVE-2026-89002	6.8	0%	Sep 24	WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item Preview Affected: before 2.8.26
CVE-2025-13031	5.9	0%	Dec 9	WPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSS Affected: before 2.8.13
CVE-2026-89001	4.9	0%	Sep 27	WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings Affected: before 2.8.27
CVE-2026-89003	4.1	0%	Sep 27	WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview Affected: before 2.8.27
CVE-2026-89000	4.1	0%	Sep 27	WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run Affected: before 2.8.27
CVE-2026-89004	2.7	0%	Sep 24	WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR Affected: before 2.8.26