CVE-2026-15095 Product Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop...

CVE-2026-15095 Product Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop...

CVE-2026-15095

The Product Feed Manager for WooCommerce – CTX Feed plugin for WordPress is vulnerable to directory traversal in all versions up to and including 6.6.43 via the provider parameter. Authenticated attackers with Shop Manager or higher privileges can delete arbitrary files on the server by issuing t...

CVE-2026-15095: Improper Limitation of a Pathname to a Restricted Directory

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop...

PT-2026-96683

Name of the Vulnerable Software and Affected Versions Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels versions prior to 6.6.44 Description A Directory Traversal issue exists where authenticated attackers with shop manager-level access or higher can delete...

CVE-2026-66580

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

EUVD-2026-81501

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-66580 WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-66580

Product Feed Manager is a WordPress plugin affected by a SQL Injection vulnerability in versions

WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Product Feed Manager versions = 7.12.0...

PT-2026-94267

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-66580: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-15258

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...

WordPress Product Feed Manager For WooCommerce plugin < 7.6.1 - Contributor+ SQL Injection vulnerability

Contributor+ SQL Injection vulnerability discovered by Md Amin Ullah Sheikh in WordPress Plugin Product Feed Manager versions 7.6.1...

CVE-2026-15258 Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...

EUVD-2026-51427

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...

CVE-2026-15258

The Product Feed Manager For WooCommerce WordPress plugin, in versions prior to 7.6.1 , is vulnerable to SQL injection . The root cause is the improper sanitization and escaping of product-feed custom filter rules before they are utilized in a SQL query. This flaw allows users with the Contributo...

CVE-2026-15258 Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...

CVE-2026-15258

The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks...