01 Record

CVE-2026-19883

WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action

HighPUBLISHEDCNA: Wordfence

Base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON CVE Program record

02 Description

WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action

03 Metadata

Published

2026-08-22 02:26Z2 HR AGO

Last updated

2026-08-22 02:26Z2 HR AGO

Reserved

2026-08-14

Assigning CNA

Wordfence

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-269Improper Privilege ManagementClass

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

cbd68b6619eb3d715fa5cc8f79baf7c3025a16e22e58f327fa80c1d0fb5dd170

04 Affected products

VendorProductVersionsPlatforms

etruelWPeMatico RSS Feed Fetcher0 to 2.8.24—

05 References

www.wordfence.comhttps://www.wordfence.com/threat-intel/vulnerabilities/id/4e591cb4-058d-4d8e-948e-d65ab01db618?source=cve
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/wpematico_functions.php#L2077
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/wpematico_functions.php#L2096
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/tools_page.php#L224
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/wpematico_class.php#L59
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/wpematico_functions.php#L2077
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/wpematico_functions.php#L2096
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/tools_page.php#L224
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/wpematico_class.php#L59
github.comhttps://github.com/etruel/wpematico/commit/e297f41b49c6ec76635b006dff8a964a99a1ed24