https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:36:06.980385+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-89001 CVE-2026-89001 — WPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign Settings 2026-09-28T12:36:06.982205+00:00

Affected: Unknown WPeMatico RSS Feed Fetcher

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not verify that a user running a feed campaign is permitted to publish content or to attribute posts to another account, allowing users with contributor-level access and above to publish posts live and set any registered user, including an administrator, as the post author.