Advisories · Technology

WebAppick CTX Feed.

Every CVE that names WebAppick CTX Feed among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-73383 CVE record

CVSS 4.9 Medium

WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
- WebAppick CTX Feed
- Path traversal
Not analysed yet 18 Aug 2026
CVE-2026-66709 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability
- WebAppick CTX Feed
- Code injection
Not analysed yet 6 Aug 2026
CVE-2026-39434 CVE record

CVSS 7.2 High

WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability
- WebAppick CTX Feed
- Insecure deserialization
Not analysed yet 15 Jun 2026
CVE-2026-22461 CVE record

CVSS 5.3 Medium

WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability
- WebAppick CTX Feed
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2024-38775 CVE record

CVSS 7.2 High

WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability
- WebAppick CTX Feed
- Privilege escalation
Not analysed yet 1 Aug 2024