Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:58:58 +0000 CVE-2026-89006 — WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed Import https://vulnerability.circl.lu/vuln/cve-2026-89006 <p><strong>Affected:</strong> Unknown WPeMatico RSS Feed Fetcher</p> <p>The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.</p> <p><strong>Affected:</strong> Unknown WPeMatico RSS Feed Fetcher</p> <p>The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not sanitize imported feed content before storing it as post content, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.</p> https://vulnerability.circl.lu/vuln/cve-2026-89006