high8.1
CVE-2026-15258
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them…
Impact
The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection attacks.
Affected products
| Product | Affected versions |
|---|---|
| Product Feed Manager For WooCommerce WordPress Plugin | before 7.6.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.