wahid0003 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH wahid0003 CVE published 2026-11-06

CVE-2026-87964

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection due to insufficient sanitization of the `feedConfigCustom2` parameter. Authenticated attackers with Shop Manager-level access can inject and execute arbitrary PHP code, escalating privileges to full remote code execution and site takeover.