Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-125814 EUVD-2026-125286GHSA-r4h4-jm8p-w493

WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.

Affected products

VendorProductAffectedFixed
Rymera Web Co Product Feed PRO for WooCommerce ≤ 13.5.8 —

References