WordPress Product Feed PRO for WooCommerce plugin <= 13.5.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Feed PRO for WooCommerce versions = 13.5.7...

WordPress Product Feed PRO for WooCommerce Plugin <= 13.2.5 is vulnerable to Cross Site Scripting (XSS)

Software Product Feed PRO for WooCommerce Type Plugin Vulnerable versions = 13.2.5 Fixed in 13.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-24800 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 937a0dd44e83 Credits Rafie Muhamma...

WordPress Product Feed PRO for WooCommerce plugin <= 11.0.6 - Settings Update to Stored Cross-Site Scripting (XSS) vulnerability

Settings Update to Stored Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress Product Feed PRO for WooCommerce plugin versions = 11.0.6. Solution Update the WordPress Product Feed PRO for WooCommerce plugin to the latest available version at least 11.0.7...