The WPeMatico RSS Feed Fetcher WordPress plugin prior to version 2.8.27 does not validate or restrict the destination of user-supplied feed URLs before fetching them on the server. Additionally, it lacks proper capability checks for users initiating these fetches. This results in a server-side request forgery (SSRF) vulnerability (CWE-918) that enables authenticated users with contributor-level permissions or above to make the server issue HTTP requests to internal or otherwise restricted network resources and obtain the responses, potentially exposing sensitive internal information.

Authenticated users with contributor-level access or higher can exploit this vulnerability to make the server perform unauthorized requests to internal network resources. This can lead to unauthorized information disclosure from internal systems that are not normally accessible externally. The vulnerability does not require higher privileges than contributor-level, broadening the potential attacker base within a compromised WordPress environment.

Upgrade the WPeMatico RSS Feed Fetcher plugin to version 2.8.27 or later where this vulnerability is fixed. The plugin author has addressed the issue by adding capability checks and validating feed URLs before fetching. Until upgrading, restrict contributor-level user permissions or disable the plugin to prevent exploitation.