SecAlerts
w

wpematico

Security Risk Profile

41
/100
medium

Security Risk Score

Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from July 26, 2025 to present

12
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
5.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
41/100
medium
🆕 1Fresh (<7d)📈 8 in Last 30 Days

Severity Distribution

Critical
0
High
1
Medium
10
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
XSS
4
2
SSRF
3
3
CSRF
1

Most Affected Products

1. WPeMatico RSS Feed Fetcher6
2. WPeMatico WPeMatico RSS Feed Fetcher4
3. WPeMatico RSS Feed Fetcher WordPress plugin2
4. WordPress WPeMatico RSS Feed Fetcher1

Recent Vulnerabilities

See more →
CVE-2026-110252
CVSS 5.4medium

WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import

Oct 16, 2026🔧 No Patch
CVE-2026-89006
CVSS 6.8medium

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import

Sep 27, 2026🔧 No Patch
CVE-2026-89001
CVSS 4.9medium

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings

Sep 27, 2026🔧 No Patch
CVE-2026-89003
CVSS 4.1medium

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Preview

Sep 27, 2026🔧 No Patch
CVE-2026-89000
CVSS 4.1medium

WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign Run

Sep 27, 2026🔧 No Patch
CVE-2026-89004
CVSS 2.7low

WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

Sep 24, 2026🔧 No Patch
CVE-2026-89005
CVSS 6.8medium

WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Word to Category

Sep 24, 2026🔧 No Patch
CVE-2026-89002
CVSS 6.8medium

WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item Preview

Sep 24, 2026🔧 No Patch
CVE-2026-19883
CVSS 8.8high

WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action

Aug 22, 2026🔧 No Patch
CVE-2025-11917
CVSS 6.4medium

WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed

Nov 5, 2025🔧 No Patch

Monitor wpematico in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.