Vulnerabilities

TI-2026-67963 CVE-2026-39765 · GHSA-qcqw-hqvg-264v

Privilege escalation in WordPress Challan plugin

LOW 34

Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0043 Published 2026-10-06 No fix listed CWE-266

TI-2026-51502 CVE-2026-73383 · GHSA-qr66-8jmv-phv2

WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability

LOW 23

Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00474 Published 2026-08-18 No fix listed CWE-22

TI-2026-47377 CVE-2026-66709 · GHSA-3gm5-3v88-c49w

WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

MEDIUM 43

Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00822 Published 2026-08-06 No fix listed CWE-94

TI-2026-28413 CVE-2026-39434 · GHSA-7hfg-g6xf-6f7q

WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability

LOW 34

Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00446 Published 2026-06-15 No fix listed CWE-502

TI-2026-18042 CVE-2026-22461 · GHSA-rvrx-h594-44jq

WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00349 Published 2026-01-22 No fix listed CWE-862

TI-2025-29959 CVE-2025-47462 · GHSA-m8v9-m9wg-xv5q

WordPress Challan plugin <= 3.7.58 - CSRF to Privilege Escalation vulnerability

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in WebAppick Challan webappick-pdf-invoice-for-woocommerce allows Privilege Escalation.This issue affects Challan: from n/a through <= 3.7.58.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00198 Published 2025-05-07 No fix listed CWE-352

TI-2024-26009 CVE-2024-38775 · GHSA-57xm-m24p-r448

WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

LOW 34

Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00557 Published 2024-08-01 No fix listed CWE-269

TI-2019-15983 CVE-2019-1010124 · GHSA-mpgf-25r6-7jp3

Cross-site scripting in WebAppick WooCommerce Product Feed

LOW 30

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03213 Published 2019-07-23 No fix listed CWE-79

Vulnerabilities

Filters