PT-2026-25288 · Josh Kohlbach · Product Feed Pro For Woocommerce

Nguyen Ba Khanh · Publicado 2026-03-13 · Atualizado 2026-03-14 · CVE-2026-32443

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Josh Kohlbach Product Feed PRO for WooCommerce versions through 13.5.2

Description The software contains a Cross-Site Request Forgery (CSRF) issue. A Cross-Site Request Forgery attack allows an attacker to perform actions on behalf of an authenticated user without their knowledge. This can lead to unauthorized modifications or actions within the application.

Recommendations Versions prior to and including 13.5.2 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-32443

Produtos afetados

Product Feed Pro For Woocommerce

Referências · 4

• https://twitter.com/CVEnew/status/2032831410873184392 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-32443 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/woo-product-feed-pro/vulnerability/wordpress-product-feed-pro-for-woocommerce-plugin-13-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Nota
• https://twitter.com/VulmonFeeds/status/2032644337591255260 · Publicação no Twitter