CVE-2025-49922: WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.3 - Broken Access Control vulnerability
Published Oct 22, 2025
·Updated
Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPeMatico RSS Feed Fetcher: from n/a through <= 2.8.3.
Affected Software
2 affected components
WPeMatico RSS Feed Fetcher<=2.8.3
WordPress WPeMatico RSS Feed Fetcher<=2.8.3
Event History
Oct 22, 2025
CVE Published
via MITRE·02:32 PM
Data Sourced
via MITRE·02:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-49922?
CVE-2025-49922 is a medium severity vulnerability due to missing authorization in WPeMatico RSS Feed Fetcher.
2
How do I fix CVE-2025-49922?
To fix CVE-2025-49922, update the WPeMatico RSS Feed Fetcher plugin to version 2.8.4 or higher.
3
What versions of WPeMatico RSS Feed Fetcher are affected by CVE-2025-49922?
CVE-2025-49922 affects WPeMatico RSS Feed Fetcher versions up to and including 2.8.3.
4
What kind of vulnerability is CVE-2025-49922?
CVE-2025-49922 is classified as a missing authorization vulnerability.
5
Can CVE-2025-49922 lead to data exposure?
Yes, if exploited, CVE-2025-49922 can result in unauthorized access to sensitive data.