Vulnerabilidades de Wahid0003

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Wahid0003: 1 registro(s), com severidade, exploração e correções.

Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels 1

Somente exploradas (KEV) →

CVE-2025-12975 Alta · 7.2 CWE-862 19/02/2026

CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation

The CTX Feed – WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_plugin_installing() function in all versions up to, and including, 6.6.11. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install arbitrary plugins which can be leveraged to achieve remote code execution.