CVE-2025-12975

🗓️ 19 Feb 2026 04:36:10Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 16 Views

Shop Manager or higher can install arbitrary plugins due to a missing capability check in CTX Feed plugin up to 6.6.11.

Reporter	Title	Published	Views	Family All 8
CNNVD	WordPress plugin CTX Feed – WooCommerce Product Feed Manager 安全漏洞	19 Feb 202600:00	–	cnnvd
Cvelist	CVE-2025-12975 CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation	19 Feb 202604:36	–	cvelist
NVD	CVE-2025-12975	19 Feb 202607:17	–	nvd
Patchstack	WordPress CTX Feed - WooCommerce Product Feed Manager plugin <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability	18 Feb 202622:44	–	patchstack
Positive Technologies	PT-2026-20596	19 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-12975	20 Feb 202607:22	–	redhatcve
Vulnrichment	CVE-2025-12975 CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation	19 Feb 202604:36	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 16, 2026 to February 22, 2026)	26 Feb 202616:02	–	wordfence

Vulners

Node

wahid0003 product_feed_manager_for_woocommerce_ctx_feed_support_220+_shopping_&_social_channelsRange≤6.6.11wordpress

[
  {
    "vendor": "wahid0003",
    "product": "Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.6.11",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordpress	www.wordpress.org/plugins/webappick-product-feed-for-woocommerce/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4f77f4cd-f4b3-42bc-a1a9-e5df5daa42b7

17 Jun 2026 08:33Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.2

EPSS0.00821

SSVC

CWE-862