Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-30
Product Catalog Feed - Security Vulnerability (CVE-2026-118078)
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite
PLUGIN
Product Catalog Feed
CVE-2026-118078
Risk Score
Threat Entry
Updated 2026-06-17
Product Catalog Feed - Cross-Site Request Forgery (CSRF) (CVE-2023-49824)
Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.
PLUGIN
Product Catalog Feed
CVE-2023-49824
Risk Score
Threat Entry
Updated 2026-06-17
Product Catalog Feed - Cross-Site Scripting (XSS) (CVE-2023-1805)
The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
PLUGIN
Product Catalog Feed
CVE-2023-1805
Risk Score
Threat Entry
Updated 2026-06-17
Product Catalog Feed - Cross-Site Scripting (XSS) (CVE-2023-1804)
The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.
PLUGIN
Product Catalog Feed
CVE-2023-1804
Risk Score