The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Directory Traversal. Authenticated attackers with shop manager-level access and above can read arbitrary files on the server, potentially accessing sensitive information. This vulnerability, CVE-2026-16777, has a Medium severity and is confirmed in plugin versions up to 2.8.0. The explo [truncated]
The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery. This is due to missing or incorrect nonce validation on several functions. Una auth users can trigger feed migration, clear custom-attribute transient caches, rewrite feed file URLs to lowercase, toggle legacy filter and rule settings, and delete duplicated fee [truncated]
