CVE-2026-89004
WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by other users, including administrators.
| Vendor | unknown |
| Product | wpematico rss feed fetcher |
| Published | Sep 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wpematico rss feed fetcher
Be the first to know when new unknown vulnerabilities affecting unknown wpematico rss feed fetcher are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WPeMatico RSS Feed Fetcher
0 < 2.8.26
References
Credits
Karthik Ramakrishnan WPScan