https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:21:54 +0000 https://db.gcve.eu/vuln/cve-2026-15095 <p><strong>Affected:</strong> wahid0003 Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI &amp; Social Channels</p> <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> <p><strong>Affected:</strong> wahid0003 Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI &amp; Social Channels</p> <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> https://db.gcve.eu/vuln/cve-2026-15095