exploitDog

CVE-2025-49887

Опубликовано: 14 авг. 2025

Источник: nvd

CVSS3: 9.9

EPSS Низкий

Описание

Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCommerce allows Remote Code Inclusion. This issue affects Product XML Feed Manager for WooCommerce: from n/a through 2.9.3.

Ссылки

https://patchstack.com/database/wordpress/plugin/product-xml-feeds-for-woocommerce/vulnerability/wordpress-product-xml-feed-manager-for-woocommerce-plugin-2-9-3-remote-code-execution-rce-vulnerability?_s_id=cve

EPSS

Процентиль: 14%

0.00046

Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-56m6-w8wr-xj4x

CVSS3: 9.9

github

6 месяцев назад

Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCommerce allows Remote Code Inclusion. This issue affects Product XML Feed Manager for WooCommerce: from n/a through 2.9.3.

EPSS

Процентиль: 14%

0.00046

Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94