CVE-2025-13031

Name of the Vulnerable Software and Affected Versions WPeMatico RSS Feed Fetcher WordPress plugin versions prior to 2.8.13

Description The WPeMatico RSS Feed Fetcher WordPress plugin does not properly sanitize and escape certain settings. This could allow users with high privileges, such as contributors, to carry out Stored Cross-Site Scripting (XSS) attacks. Stored XSS occurs when malicious scripts are persistently stored on the target server, and then delivered to other users.

Recommendations Update to version 2.8.13 or later.