CVE-2026-89003: CWE-918 Server-Side Request Forgery (SSRF) in WPeMatico RSS Feed Fetcher
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the responses back.
AI Analysis
Technical Summary
The WPeMatico RSS Feed Fetcher WordPress plugin prior to version 2.8.27 does not verify user capabilities before fetching and rendering responses from user-supplied URLs. This lack of authorization checks enables authenticated users with contributor or higher privileges to perform SSRF attacks, causing the server to send requests to internal network hosts and retrieve their responses.
Potential Impact
Authenticated users with contributor-level access or above can exploit this vulnerability to make the server perform unauthorized HTTP requests to internal or restricted network resources. This may lead to exposure of sensitive internal data or services that are otherwise inaccessible externally.
Mitigation Recommendations
Upgrade the WPeMatico RSS Feed Fetcher plugin to version 2.8.27 or later where this vulnerability is fixed. Until then, restrict contributor-level access to trusted users only. No official patch links were provided, so verify the vendor advisory or plugin update notes for the official fix.
CVE-2026-89003: CWE-918 Server-Side Request Forgery (SSRF) in WPeMatico RSS Feed Fetcher
Description
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check before fetching a user-supplied URL and rendering the response, allowing users with contributor-level access and above to force the server to issue requests to internal-only hosts and read the responses back.
CVSS v3.1
Score 4.1medium
Affected software
WPeMatico RSS Feed Fetcher
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The WPeMatico RSS Feed Fetcher WordPress plugin prior to version 2.8.27 does not verify user capabilities before fetching and rendering responses from user-supplied URLs. This lack of authorization checks enables authenticated users with contributor or higher privileges to perform SSRF attacks, causing the server to send requests to internal network hosts and retrieve their responses.
Potential Impact
Authenticated users with contributor-level access or above can exploit this vulnerability to make the server perform unauthorized HTTP requests to internal or restricted network resources. This may lead to exposure of sensitive internal data or services that are otherwise inaccessible externally.
Mitigation Recommendations
Upgrade the WPeMatico RSS Feed Fetcher plugin to version 2.8.27 or later where this vulnerability is fixed. Until then, restrict contributor-level access to trusted users only. No official patch links were provided, so verify the vendor advisory or plugin update notes for the official fix.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-09-10T16:19:28.251Z
- State
- PUBLISHED
Threat ID: 6ab8b2d5f7a7c54106aa92db
Added to database: 09/27/2026, 06:08:21 UTC
Last enriched: 09/27/2026, 06:18:11 UTC
Last updated: 09/28/2026, 01:57:30 UTC
Views: 18
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.