Advisories · Technology

RexTheme Product Feed Manager.

Every CVE that names RexTheme Product Feed Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118089 CVE record

CVSS 7.2 High

WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability
- RexTheme Product Feed Manager
- Insecure deserialization
Not analysed yet 30 Oct 2026
CVE-2026-66580 CVE record

CVSS 8.5 High

WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
- RexTheme Product Feed Manager
- SQL injection
Not analysed yet 17 Sept 2026
CVE-2026-59553 CVE record

CVSS 7.1 High

WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
- RexTheme Product Feed Manager
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026
CVE-2023-52144 CVE record

CVSS 5.5 Medium

WordPress Product Feed Manager plugin <= 7.3.15 - Directory Traversal vulnerability
- RexTheme Product Feed Manager
- Path traversal
Not analysed yet 15 Apr 2024