Access Control Vulnerability in WPeMatico RSS Feed Fetcher by Patchstack
CVE-2025-49922

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WPematico Rss Feed Fetcher
Vendor
CVE Published:
22 October 2025

What is CVE-2025-49922?

The WPeMatico RSS Feed Fetcher plugin for WordPress has a missing authorization vulnerability, allowing unauthorized users to exploit incorrectly configured access control settings. This vulnerability affects versions of the plugin up to 2.8.3, creating potential security risks for websites utilizing this tool. It is crucial for users to update their plugins to maintain security and prevent unauthorized access.

Affected Version(s)

WPeMatico RSS Feed Fetcher <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/wpem...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Tran Tuan Dung (domiee13) (Patchstack Alliance)
JSON
.