CVE-2026-15258

The vulnerability concerns the Product Feed Manager for WooCommerce WordPress plugin prior to version 7.6.1. It does not properly sanitize or escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection. Affe...