WebAppick

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

WebAppick records in CISA KEV

No WebAppick vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Woocommerce Product Feed 1 record LOW

Records

8 records

TI-2026-47377 CVE-2026-66709 · GHSA-3gm5-3v88-c49w

WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

MEDIUM 43

Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00822 Published 2026-08-06 No fix listed CWE-94

TI-2025-29959 CVE-2025-47462 · GHSA-m8v9-m9wg-xv5q

WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through <= 3.7.58.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00198 Published 2025-05-07 No fix listed CWE-352

TI-2026-67963 CVE-2026-39765 · GHSA-qcqw-hqvg-264v

Privilege escalation in WordPress Challan plugin

LOW 34

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0043 Published 2026-10-06 No fix listed CWE-266

TI-2026-28413 CVE-2026-39434 · GHSA-7hfg-g6xf-6f7q

WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability

LOW 34

Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00446 Published 2026-06-15 No fix listed CWE-502

TI-2024-26009 CVE-2024-38775 · GHSA-57xm-m24p-r448

WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

LOW 34

Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00557 Published 2024-08-01 No fix listed CWE-269

TI-2026-18042 CVE-2026-22461 · GHSA-rvrx-h594-44jq

WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2026-01-22 No fix listed CWE-862

TI-2019-15983 CVE-2019-1010124 · GHSA-mpgf-25r6-7jp3

Cross-site scripting in WebAppick WooCommerce Product Feed

LOW 30

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03213 Published 2019-07-23 No fix listed CWE-79

TI-2026-51502 CVE-2026-73383 · GHSA-qr66-8jmv-phv2

WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability

LOW 23

Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00474 Published 2026-08-18 No fix listed CWE-22

Open these records in search →

Critical	1
High	4
Medium	3
Low	0
No CVSS	0