cleantalk
Vulnerabilities and Security Researches

WPeMatico RSS Feed Fetcher, CVE-2026-57349

CVE, Research URL

CVE-2026-57349

Home page URL

Security reports for WPeMatico RSS Feed Fetcher

Application

WPeMatico RSS Feed Fetcher

Published on
Jul 02, 2026
Research Description
Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.
Affected versions
max 2.8.18.
Status
vulnerable
Previous vulnerability researches
WPeMatico RSS Feed Fetcher (CVE-2021-24793) , Jun 07, 2024
WPeMatico RSS Feed Fetcher (CVE-2025-8103) , Jul 26, 2025
WPeMatico RSS Feed Fetcher (CVE-2025-49922) , Nov 11, 2025
WPeMatico RSS Feed Fetcher (CVE-2025-13031) , Dec 11, 2025
WPeMatico RSS Feed Fetcher (CVE-2025-57937) , Apr 25, 2026
New vulnerability
WP Verify API (CVE-2026-89300) , Sep 30, 2026
SPS-Suite (CVE-2026-93000) , Sep 30, 2026
Simple Payment Donations &amp; Subscriptions Plugin by Paymattic &#8211; Best Payments Plugin for WP (CVE-2026-89411) , Sep 30, 2026
Contact Form by WPForms – Drag & Drop Form Builder for WordPress (CVE-2026-84744) , Sep 30, 2026
WPeMatico RSS Feed Fetcher (CVE-2026-89006) , Sep 30, 2026