WordPress Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant plugin < 5.3.2 - Unauthenticated Forced Store Registration vulnerability

Unauthenticated Forced Store Registration vulnerability discovered by JunHee CHO in WordPress Plugin Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant versions 5.3.2...

CVE-2026-87968 Product Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store Registration

The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on the AJAX action that registers the store with its feed service and exposes it to unauthenticated users, so any visito...