[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHa0ayN2AoToHwERdtTyP90daAOo4jeTdwt0bQDlkoQo":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20,"patch_diff_files":21,"patch_trac_url":9,"research_status":27,"research_verified":28,"research_rounds_completed":29,"research_plan":30,"research_summary":9,"research_vulnerable_code":9,"research_fix_diff":9,"research_exploit_outline":9,"research_model_used":31,"research_started_at":32,"research_completed_at":33,"research_error":9,"poc_status":9,"poc_video_id":9,"poc_summary":9,"poc_steps":9,"poc_tested_at":9,"poc_wp_version":9,"poc_php_version":9,"poc_playwright_script":9,"poc_exploit_code":9,"poc_has_trace":28,"poc_model_used":9,"poc_verification_depth":9,"poc_exploit_code_gated":28,"source_links":34},"CVE-2026-57349","wpematico-rss-feed-fetcher-unauthenticated-stored-cross-site-scripting","WPeMatico RSS Feed Fetcher \u003C= 2.8.17 - Unauthenticated Stored Cross-Site Scripting","The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.8.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","wpematico",null,"\u003C=2.8.17","2.8.18","high",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-07-01 00:00:00","2026-07-07 20:01:43",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F38227a1c-30a7-436c-853f-7205e421bd19?source=api-prod",7,[22,23,24,25,26],"app\u002Fdebug_page.php","app\u002Fjs\u002Ftools_page.js","app\u002Ftools_page.php","readme.txt","wpematico.php","researched",false,3,"# Vulnerability Research Plan: CVE-2026-57349\n\n## 1. Vulnerability Summary\nThe **WPeMatico RSS Feed Fetcher** plugin (versions \u003C= 2.8.17) is vulnerable to **Unauthenticated Stored Cross-Site Scripting (XSS)**. The vulnerability exists in the plugin's \"Feed Viewer\" tool, which is part of the debug\u002Ftools suite. \n\nSpecifically, the plugin fails to sanitize or escape HTTP headers and URL information returned when fetching a feed link. This data is then rendered into the WordPress admin dashboard via an AJAX response using the dangerous `.html()` jQuery method. While the tool is located in the admin area, an attacker can leverage a specialized JavaScript component (`app\u002Fjs\u002Ftools_page.js`) that automatically triggers a feed fetch based on a URL parameter (`feedlink`), effectively allowing an unauthenticated attacker to inject scripts into the admin's session via a malicious external RSS feed.\n\n## 2. Attack Vector Analysis\n- **Endpoint:** `wp-admin\u002Fadmin-ajax.php`\n- **Action:** `wp_ajax_wpematico_get_feed_file` (handled by `wpematico_feed_viewer`)\n- **Vulnerable Parameter:** `url` (in the POST request) and the subsequent HTTP headers returned by that URL.\n- **Trigger Parameter:** `feedlink` (in the GET request to the tools page).\n- **Authentication:** The attacker is unauthenticated; however, the script executes when a logged-in Administrator","gemini-3-flash-preview","2026-07-25 11:39:56","2026-07-25 11:41:33",{"type":35,"vulnerable_version":36,"fixed_version":11,"vulnerable_browse":37,"vulnerable_zip":38,"fixed_browse":39,"fixed_zip":40,"all_tags":41},"plugin","2.8.17","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwpematico\u002Ftags\u002F2.8.17","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpematico.2.8.17.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwpematico\u002Ftags\u002F2.8.18","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpematico.2.8.18.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fwpematico\u002Ftags"]