PT-2025-30954 · WordPress · Wpematico Rss Feed Fetcher
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
WPeMatico RSS Feed Fetcher plugin for WordPress versions prior to 2.8.8
Description
The plugin is susceptible to a Cross-Site Request Forgery issue because of missing nonce validation in the
handle feedback submission() function. This allows unauthenticated attackers to deactivate the plugin by forging requests, provided they can trick a site administrator into performing an action.Recommendations
Update the WPeMatico RSS Feed Fetcher plugin to version 2.8.8 or later.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpematico Rss Feed Fetcher