Threats tagged 'ghsa-52h6-5xm4-pr2j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2025-11917The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up Medium6.4EPSS 0.2%2025-11-05GCVE DatabaseCVE-2025-11917 The WPeMatico RSS Feed Fetcher plugin for WordPress contains a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 2.8.11. This vulnerability exists in the wpematico_test_feed() function and allows authenticated users with Subscriber-level access or higher to make arbitrary web requests from the server. This can lead to unauthorized querying and modification of internal services. EPSS 0.2%Report on CVE-2025-11917 Vulnerability CWE-918 #ghsa-52h6-5xm4-pr2j	GCVE Database	2025-11-05

Page 1 of 1