CyberRota Analysis
AI-GeneratedThe WPeMatico RSS Feed Fetcher plugin for WordPress versions prior to 2.8.26 is vulnerable due to inadequate verification of ownership or authorization, enabling users with contributor-level access and higher to access and read the configuration and execution logs of campaigns created by other users, including those of administrators. This could lead to unauthorized exposure of sensitive campaign data. WordPress site administrators and users of the plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by other users, including administrators.