PT-2026-25288 · Josh Kohlbach · Product Feed Pro For Woocommerce

Nguyen Ba Khanh · Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32443

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Josh Kohlbach Product Feed PRO for WooCommerce versions through 13.5.2

Description The software contains a Cross-Site Request Forgery (CSRF) issue. A Cross-Site Request Forgery attack allows an attacker to perform actions on behalf of an authenticated user without their knowledge. This can lead to unauthorized modifications or actions within the application.

Recommendations Versions prior to and including 13.5.2 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-32443

Affected Products

Product Feed Pro For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32443 · Security Note
• https://twitter.com/CVEnew/status/2032831410873184392 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/woo-product-feed-pro/vulnerability/wordpress-product-feed-pro-for-woocommerce-plugin-13-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2032644337591255260 · Twitter Post