Sensitive Data Exposure in WPeMatico RSS Feed Fetcher by etruel
CVE-2025-57937

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WPematico Rss Feed Fetcher
Vendor
CVE Published:
22 September 2025

What is CVE-2025-57937?

The WPeMatico RSS Feed Fetcher, developed by etruel, has a significant vulnerability that allows attackers to retrieve sensitive information from the system. This exposes embedded sensitive data, potentially compromising the integrity and security of affected instances. Users of version 2.8.10 and earlier should take immediate actions to secure their systems by updating to the latest version, thus mitigating risks associated with unauthorized access.

Affected Version(s)

WPeMatico RSS Feed Fetcher <= 2.8.10

References

https://patchstack.com/database/wordpress/plugin/wpematic...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack)
JSON
.