Etruel

10 CVEs across 4 Etruel products. Browse Etruel vulnerabilities, severities, and proof-of-concept exploits.

Etruel products with known CVEs

ProductCVEs
Wpematico Rss Feed Fetcher5
Wp Delete Post Copies2
Wp Views Counter2
Wpematico Rss Feed Fetcher1
Etruel CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57349High7.12026-07-02Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.
CVE-2025-66130Medium5.32025-12-16Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…
CVE-2025-12066Medium4.42025-11-21The WP Delete Post Copies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.0.2 due…
CVE-2025-11917Medium6.42025-11-05The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.11 via the wpematico…
CVE-2025-49922Medium4.32025-10-22Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2025-57937Medium4.32025-09-22Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Retrieve Embedde…
CVE-2025-8103Medium4.32025-07-26The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.7. This is due to mis…
CVE-2025-49859Medium6.52025-06-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in etruel WP Views Counter wpecounter allows Stored XSS.This…
CVE-2025-22541Medium5.42025-01-07Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Lev…
CVE-2021-24793Medium4.82021-11-01The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing h…