WebAppick CTX Feed vulnerabilities

Latest WebAppick CTX Feed CVEs

Newest publication first

1. CVE-2026-73383 WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability

   Published 2026-08-18

   Medium·CVSS 4.9 EPSS 0.47%

   Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions.

2. CVE-2026-66709 WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

   Published 2026-08-06

   Critical·CVSS 9.1 EPSS 0.82%

   Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

3. CVE-2026-39434 WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability

   Published 2026-06-15

   High·CVSS 7.2 EPSS 0.45%

   Shop manager PHP Object Injection in CTX Feed <= 6.6.26 versions.

4. CVE-2026-22461 WordPress CTX Feed plugin <= 6.6.18 - Broken Access Control vulnerability

   Published 2026-01-22

   Medium·CVSS 5.3 EPSS 0.35%

   Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through <= 6.6.18.

5. CVE-2024-38775 WordPress CTX Feed plugin <= 6.5.6 - Arbitrary Options Update vulnerability

   Published 2024-08-01

   High·CVSS 7.2 EPSS 0.56%

   Improper Privilege Management vulnerability in WebAppick CTX Feed allows Privilege Escalation.This issue affects CTX Feed: from n/a through 6.5.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.