Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in CTX Feed – WooCommerce Product Feed Manager Plugin 3.1.14

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 30, 2019

WooCommerce Product Feed 3.1.14 and earlier versions have a security vulnerability that might allow someone to gain control of a WordPress website if certain conditions are met. This vulnerability is called Cross Site Scripting (XSS) and it can be exploited if an administrator is logged in. The vulnerable component is located in the file admin/partials/woo-feed-manage-list.php at line 63.

Detected in:

CTX Feed – WooCommerce Product Feed Manager fixed vulnerable versions:
CTX Feed – WooCommerce Product Feed Manager Plugin fixed vulnerable versions: >= * <= 3.1.14
Product Feed Manager for WooCommerce – CTX Feed – Sell on 220+ Online Marketplaces fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.