Description
Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Naked Cat Plugins (by Webdados) | Feed KuantoKusta for WooCommerce – Free | ≤ 5.3 | — |
Critical · 9.3
CVE-2026-39441
EUVD-2026-36926GHSA-wxhf-xjhx-2vh3
WordPress Feed KuantoKusta for WooCommerce – Free plugin <= 5.3 - SQL Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack