CVE-2026-89003 | WPeMatico RSS Feed Fetcher Plugin up to 2.8.26 on WordPress server-side request forgery

September 27, 2026 Yanac

A vulnerability was found in WPeMatico RSS Feed Fetcher Plugin up to 2.8.26 on WordPress. It has been declared as problematic. Impacted is an unknown function of the component RSS Feed Fetcher. Such manipulation leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2026-89003. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More