Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-13
Woo Product Feed Pro - Security Vulnerability (CVE-2026-125814)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.
PLUGIN
Woo Product Feed Pro
CVE-2026-125814
Risk Score
Threat Entry
Updated 2026-10-06
Woo Product Feed Pro - Security Vulnerability (CVE-2026-103349)
Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.7.
PLUGIN
Woo Product Feed Pro
CVE-2026-103349
Risk Score
Threat Entry
Updated 2026-07-24
Woo Product Feed Pro - Cross-Site Request Forgery (CSRF) (CVE-2026-3499)
The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 through 13.5.2.1. This is due to missing or incorrect nonce validation on the ajax_migrate_to_custom_post_type, ajax_adt_clear_custom_attributes_product_meta_keys, ajax_update_file_url_to_lower_case, ajax_use_legacy_filters_and_rules, and ajax_fix_duplicate_feed functions. This makes it possible for unauthenticated attackers to trigger feed migration, clear custom-attribute transient caches, rewrite feed file URLs to lowercase, toggle legacy filter and rule settings, and delete duplicated feed posts via a forged request granted they can trick a site administrator into performing…
PLUGIN
Woo Product Feed Pro
CVE-2026-3499
Risk Score
Threat Entry
Updated 2026-06-17
Woo Product Feed Pro - Cross-Site Request Forgery (CSRF) (CVE-2026-32443)
Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue affects Product Feed PRO for WooCommerce: from n/a through
PLUGIN
Woo Product Feed Pro
CVE-2026-32443
Risk Score