PatchTheCVEproduct catalog feed vulnerabilities and fixes
Recent CVEs affecting product catalog feed, with upgrade or downgrade steps. 3 tracked.
Also searched as: productcatalogfeed.
product catalog feed has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-12-17. Highest priority: CVE-2023-1804 (score 37/100).
- CVE-2023-49824 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This is
- CVE-2023-1805 MEDIUM 6.1 UPGRADE The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page
- CVE-2023-1804 MEDIUM 6.1 UPGRADE The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit
FAQ
How do I fix product catalog feed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is product catalog feed being exploited right now?
None of the tracked product catalog feed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which product catalog feed CVE should I patch first?
CVE-2023-1804 currently ranks highest (37/100): The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit .