etruel/wpematico

Releases84

Frequency1 month 1 week

Last Release 28 days ago

Stars14

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-11917 ↗	Nov 5, 2025Wednesday, 5 November 2025, 07:15	6.4 MEDIUM	—
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematico_test_feed() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.