CVE-2026-89000

Deferred Deferred - Pending Action

Stored SSRF in WPeMatico RSS Feed Fetcher WordPress Plugin

Publication date: 2026-09-27

Last updated on: 2026-09-28

Assigner: WPScan

Description

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to internal-only resources and read the responses back.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-27

Last Modified

2026-09-28

Generated

2026-10-17

AI Q&A

2026-09-27

EPSS Evaluated

2026-10-16

NVD

CVE-2026-89000

EUVD

EUVD-2026-87892

Affected Vendors & Products

Vendor	Product	Version / Range
wpematico	wpeematico_rss_feed_fetcher	to 2.8.27 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the WPeMatico RSS Feed Fetcher WordPress plugin before version 2.8.27. It allows users with contributor-level access or higher to supply a feed URL that the server fetches without validating the destination or checking user capabilities. This can force the server to make requests to internal resources and read responses, potentially exposing sensitive information.

Detection Guidance

Check if the WPeMatico RSS Feed Fetcher plugin version is below 2.8.27. Logs may show unusual server-side requests to internal resources. Review user roles with contributor access or higher for suspicious feed URL submissions.

Impact Analysis

Attackers with contributor-level access or higher could exploit this to make the server access internal resources and leak sensitive data. This includes internal network services, configuration files, or other restricted information. The impact depends on the server's internal setup and exposed resources.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) or HIPAA (health information privacy) if such data is exposed. Compliance may be impacted if the breach results in data leaks or unauthorized access to regulated information.

Mitigation Strategies

Update the WPeMatico RSS Feed Fetcher plugin to version 2.8.27 or later immediately. Restrict contributor-level and higher user roles to prevent unauthorized feed URL submissions. Monitor server logs for unusual internal requests.

Hi! I’m here to help you understand CVE-2026-89000. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70