https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:14:19 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15095 <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-15095 https://vulnerability.circl.lu/vuln/ghsa-mmq2-8hq5-2c6q <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> <p>The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping &amp; Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the &#39;provider&#39; parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger the unlink(); deletion is further constrained to files whose extensions match the plugin&#39;s validated whitelist (csv, xml, tsv, xls, xlsx, json, txt).</p> https://vulnerability.circl.lu/vuln/ghsa-mmq2-8hq5-2c6q