54 matches found
CVE-2026-15095
The Product Feed Manager for WooCommerce – CTX Feed plugin for WordPress is vulnerable to directory traversal in all versions up to and including 6.6.43 via the provider parameter. Authenticated attackers with Shop Manager or higher privileges can delete arbitrary files on the server by issuing t...
CVE-2026-15095: Improper Limitation of a Pathname to a Restricted Directory
The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop...
CVE-2026-66580
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
EUVD-2026-81501
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-66580
Product Feed Manager is a WordPress plugin affected by a SQL Injection vulnerability in versions
CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Product Feed Manager versions = 7.12.0...
CVE-2026-66580: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...
CVE-2026-15258
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
EUVD-2026-51427
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
WordPress Product Feed Manager For WooCommerce plugin < 7.6.1 - Contributor+ SQL Injection vulnerability
Contributor+ SQL Injection vulnerability discovered by Md Amin Ullah Sheikh in WordPress Plugin Product Feed Manager versions 7.6.1...
CVE-2026-15258 Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
CVE-2026-15258
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
CVE-2026-15258
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
CVE-2026-15258 Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
CVE-2026-15258: Improper Neutralization of Special Elements used in an SQL Command
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...
PT-2026-66716
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...