{"uuid": "5e94c469-da48-4bca-b6bf-25864c9d7ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://gist.github.com/ichintu/949a60d8b386934bcc70d3af45608090", "content": "**CVE-2026-19883 \u2013 WPeMatico RSS Feed Fetcher (\u2264\u202f2.8.24)**  \n- **Flaw:** Unchecked capability in `wpematico_import_settings` lets any authenticated user (Subscriber+) change any plugin option.  \n- **Impact:** An attacker can alter critical settings\u2014e.g., set default user role to Administrator or enable registration\u2014to gain administrative access.  \n- **Severity:** 8.8 (High)  \n- **Published:** Aug\u202f22\u202f2026, 3:16\u202fa.m.", "creation_timestamp": "2026-08-22T08:01:31.137319Z"}