WordPress plugin
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium9
- Low0
All Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.6 | Authenticated (Shop Manager+) PHP Object Injection ≤13.5.7Update to 13.5.8 | CVE-2026-103349 | |
| Medium5.3 | Unauthenticated Information Exposure ≤13.5.6Update to 13.5.7 | CVE-2026-16611 | |
| High8.8 | 13.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions 13.4.6 – 13.5.2.1Update to 13.5.2.2 | CVE-2026-3499 | |
| Medium4.3 | Cross-Site Request Forgery ≤13.5.2Update to 13.5.2.1 | CVE-2026-32443 | |
| Medium5.3 | Sensitive Information Exposure via Log Files ≤13.3.1Update to 13.3.2 | CVE-2024-32513 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤13.2.5Update to 13.2.6 | CVE-2024-24800 | |
| Medium4.3 | Cross-Site Request Forgery ≤12.4.4Update to 12.4.5 | — | |
| Medium4.3 | Cross-Site Request Forgery via update_project ≤12.4.0Update to 12.4.1 | CVE-2022-46793 | |
| Medium6.1 | Reflected Cross-Site Scripting <11.2.3Update to 11.2.3 | CVE-2022-0426 | |
| Medium5.4 | Settings Update to Stored Cross-Site Scripting <11.0.7Update to 11.0.7 | CVE-2021-24974 |
- Medium6.6Authenticated (Shop Manager+) PHP Object Injection
≤13.5.7Update to 13.5.8
- Medium5.3Unauthenticated Information Exposure
≤13.5.6Update to 13.5.7
- High8.813.5.2.1 - Cross-Site Request Forgery to Multiple Administrative Actions
13.4.6 – 13.5.2.1Update to 13.5.2.2
- Medium4.3Cross-Site Request Forgery
≤13.5.2Update to 13.5.2.1
- Medium5.3Sensitive Information Exposure via Log Files
≤13.3.1Update to 13.3.2
- Medium6.1Reflected Cross-Site Scripting
≤13.2.5Update to 13.2.6
- Medium4.3Cross-Site Request Forgery
≤12.4.4Update to 12.4.5
- Medium4.3Cross-Site Request Forgery via update_project
≤12.4.0Update to 12.4.1
- Medium6.1Reflected Cross-Site Scripting
<11.2.3Update to 11.2.3
- Medium5.4Settings Update to Stored Cross-Site Scripting
<11.0.7Update to 11.0.7
Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce: common questions
Does Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce: 1 high, 9 medium. None are known to affect version null.
How do I check which version of Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce vulnerability?
CVE-2026-103349, published Oct 3, 2026: Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce <= 13.5.7 - Authenticated (Shop Manager+) PHP Object Injection. Severity: Medium (CVSS 6.6).
Is any Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.