Skip to content
PluginCanary

WPeMatico RSS Feed Fetcher

by etruel · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 43 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WPeMatico RSS Feed Fetcher
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WPeMatico RSS Feed Fetcher still maintained?
Yes. Last release 3 Nov 2026, 43 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns WPeMatico RSS Feed Fetcher, and has it changed hands?
No change recorded. Main committer etruel since Nov 2010. 4 Nov 2026 · SVN log
Was WPeMatico RSS Feed Fetcher removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WPeMatico RSS Feed Fetcher safe?
16 known vulnerabilities, all fixed (latest in 2.9.1). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest WPeMatico RSS Feed Fetcher update safe to install?
No ownership change before 2.9.2. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
etruel17 Nov 2010 to 3 Nov 2026, 267 commits

1 committer recorded. No ownership change since 2010.

Maintenance

Last release
yesterday
Releases, 24 months
43
Tested up to
7.2 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WPeMatico RSS Feed Fetcher
Q1 20240
Q2 202425
Q3 20241
Q4 20242
Q1 202511
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 202630

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating per quarter for WPeMatico RSS Feed Fetcher
Q2 20244.2
Q3 20245.0
Q4 20244.3
Q1 20253.9
Q2 20255.0
Q3 20255.0
Q1 20265.0
Q2 20265.0

Average rating rose from 4.2 to 5.0 between Q2 2024 and Q2 2026.

Rating distribution
5 star478
4 star6
3 star5
2 star4
1 star21
Latest low reviews

Security record

15 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 2.9.1).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026WPeMatico RSS Feed Fetcher <= 2.9 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Content Import5.4<= 2.92.9.1Patched before disclosure
25 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.26 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 2.8.262.8.27Patched before disclosure
25 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.26 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.262.8.27Patched before disclosure
25 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.26 - Authenticated (Contributor+) Privilege Escalation6.3<= 2.8.262.8.27Patched before disclosure
25 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.26 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 2.8.262.8.27Patched before disclosure
22 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.252.8.2617
22 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.252.8.2617
22 Sep 2026WPeMatico RSS Feed Fetcher <= 2.8.25 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 2.8.252.8.2617
21 Aug 2026WPeMatico RSS Feed Fetcher <= 2.8.24 - Authenticated (Subscriber+) Privilege Escalation via Arbitrary Option Update to wpematico_import_settings admin_action8.8<= 2.8.242.8.2548
1 Jul 2026WPeMatico RSS Feed Fetcher <= 2.8.17 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.8.172.8.18100
18 Nov 2025WPeMatico RSS Feed Fetcher <= 2.8.12 - Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 2.8.122.8.13325
4 Nov 2025WPeMatico RSS Feed Fetcher <= 2.8.11 - Authenticated (Subscriber+) Server-Side Request Forgery via wpematico_test_feed6.4<= 2.8.112.8.12338
22 Sep 2025WPeMatico RSS Feed Fetcher <= 2.8.10 - Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 2.8.102.8.11382
25 Jul 2025WPeMatico RSS Feed Fetcher <= 2.8.7 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission Function4.3<= 2.8.72.8.8440
29 May 2025WPeMatico RSS Feed Fetcher <= 2.8.3 - Missing Authorization4.3<= 2.8.32.8.4498
29 Sep 2021WPeMatico RSS Feed Fetcher <= 2.6.11 - Admin+ Stored Cross-Site Scripting5.5< 2.6.122.6.12975

Changelog mentions of security fixes: 2.8.27 (security); 2.8.25 (security, nonce); 2.8.23 (security, nonce); 2.8.26 (security, escaping); 2.8.18 (vulnerability, XSS, escaping).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPeMatico RSS Feed Fetcher
4 May 2026319
11 May 2026626
18 May 2026919
25 May 202613,223
1 Jun 20261,834
8 Jun 20267,600
15 Jun 20267,937
22 Jun 20261,345
29 Jun 20268,080
6 Jul 20261,990
13 Jul 2026971
20 Jul 2026910
27 Jul 2026906
3 Aug 202614,654
10 Aug 20267,519
17 Aug 20262,919
24 Aug 20262,058
31 Aug 20261,191
7 Sep 2026884
14 Sep 20267,223
21 Sep 20269,422
28 Sep 20261,771
5 Oct 20267,513
12 Oct 20268,134
19 Oct 20261,996
26 Oct 20261,634
2 Nov 2026209

Weekly downloads over the last 4 weeks are 29% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

WebSub (FKA. PubSubHubbub)Score 100 · 100,000+RSS Includes PagesScore 100 · 10,000+Featured Images in RSS for MailchimpScore 98 · 20,000+Disable Feeds WPScore 94 · 10,000+WP RSS AggregatorScore 88 · 40,000+

Facts

Version2.9.2
Authoretruel
Added17 Nov 2010
Last updated3 Nov 2026
Active installs10,000+
Requires WordPress4.8
Tested up to7.2
Requires PHP7.0
CategoryE-commerce & Shopping
Tagsrss, xml, feed to post, rss aggregator, content curation

Other plugins by this author: WP Views Counter, Visual Builder for Contact Form 7, WP Delete Post Copies, WPeMatico RSS Feed Reader, WPeMatico Custom Hooks, Flash Cache, WPeBanOver, Fakturo Stock in List, Fakturo, WP-ISPConfig, WPeMatico Polylang

Questions

Is WPeMatico RSS Feed Fetcher still maintained?

Yes. Last release 3 Nov 2026, 43 releases in the last 24 months.

Who owns WPeMatico RSS Feed Fetcher, and has it changed hands?

No change recorded. Main committer etruel since Nov 2010.

Was WPeMatico RSS Feed Fetcher removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WPeMatico RSS Feed Fetcher safe?

16 known vulnerabilities, all fixed (latest in 2.9.1). Not on the exploited list.

Is the latest WPeMatico RSS Feed Fetcher update safe to install?

No ownership change before 2.9.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue