Description
Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PixelYourSite | Product Catalog Feed by PixelYourSite | ≤ 3.1.4 | — |
High · 7.2
CVE-2026-118078
EUVD-2026-112995GHSA-pg6q-57gw-rg7c
WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack