Advisories · Technology

WPFactory Product XML Feed Manager for WooCommerce.

Every CVE that names WPFactory Product XML Feed Manager for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49887 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability
- WPFactory Product XML Feed Manager for WooCommerce
- Code injection
Not analysed yet 14 Aug 2025
CVE-2025-30959 CVE record

CVSS 6.5 Medium

WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability
- WPFactory Product XML Feed Manager for WooCommerce
- Broken access control
Not analysed yet 16 Jul 2025