Advisories · Technology
WPeMatico RSS Feed Fetcher.
Every CVE that names WPeMatico RSS Feed Fetcher among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import
- WPeMatico RSS Feed Fetcher
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview
- WPeMatico RSS Feed Fetcher
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings
- WPeMatico RSS Feed Fetcher
- Privilege escalation
- CVSS 4.1 Medium
WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run
- WPeMatico RSS Feed Fetcher
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category
- WPeMatico RSS Feed Fetcher
- Cross-site scripting (XSS)
- CVSS 2.7 Low
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR
- WPeMatico RSS Feed Fetcher
- Broken access control
- CVSS 6.8 Medium
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item Preview
- WPeMatico RSS Feed Fetcher
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
WPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSS
- WPeMatico RSS Feed Fetcher
-
WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site Scripting
- WPeMatico RSS Feed Fetcher
- Cross-site scripting (XSS)