Home

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCommerce allows Remote Code Inclusion. This issue affects Product XML Feed Manager for WooCommerce: from n/a through 2.9.3.

PUBLISHED Reserved 2025-06-11 | Published 2025-08-14 | Updated 2025-08-14 | Assigner Patchstack




CRITICAL: 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-94 Improper Control of Generation of Code ('Code Injection')

Product status

Default status
unaffected

Any version
affected

Credits

theviper17 (Patchstack Alliance) finder

References

patchstack.com/...code-execution-rce-vulnerability?_s_id=cve vdb-entry

cve.org (CVE-2025-49887)

nvd.nist.gov (CVE-2025-49887)

Download JSON