WPFactory Product XML Feed Manager for WooCommerce Remote Code Execution Vulnerability
Vulnerability
A code injection vulnerability allowing remote code execution has been identified in the WPFactory Product XML Feed Manager for WooCommerce, affecting versions through 2.9.3. This vulnerability arises from improper control over code generation, leading to remote code inclusion.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.
Remediation
Users of the WPFactory Product XML Feed Manager for WooCommerce should update to version 2.9.4 or later. Patchstack users can enable auto-updates for vulnerable plugins.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.