CVE WATCH / VULNERABILITY DETAIL
CVE-2026-89001
UNKNOWNCVSS 0NVD feed
Published 27 September 2026 · tracked since 27 September 2026
Description
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user, includ
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120151 HIGH 8.8
- CVE-2026-120150 HIGH 8.8
- CVE-2026-120149 HIGH 8.8
- CVE-2026-120147 HIGH 8.8
- CVE-2026-120145 HIGH 8.8
- CVE-2026-120144 HIGH 8.8
- CVE-2026-120143 HIGH 8.8
- CVE-2026-120142 HIGH 8.8
- CVE-2026-120141 HIGH 8.8
- CVE-2026-120139 HIGH 8.8