CVE-2026-118078: WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

Q: Who can exploit this issue?

Exploitation requires shop manager privileges. The vulnerability is network-accessible and does not require user interaction, but it is not exploitable by an unauthenticated visitor based on the available information.

Q: Which plugin versions are affected?

Product Catalog Feed by PixelYourSite versions 3.1.4 and earlier are affected. The provided information does not identify a fixed version.

Q: What is the potential impact if exploited?

The reported CVSS vector indicates high impacts to confidentiality, integrity, and availability. Successful exploitation could therefore expose, alter, or disrupt affected WordPress site data or services.

Published Oct 29, 2026

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires shop manager privileges. The vulnerability is network-accessible and does not require user interaction, but it is not exploitable by an unauthenticated visitor based on the available information.

Which plugin versions are affected?

Product Catalog Feed by PixelYourSite versions 3.1.4 and earlier are affected. The provided information does not identify a fixed version.

What is the potential impact if exploited?

The reported CVSS vector indicates high impacts to confidentiality, integrity, and availability. Successful exploitation could therefore expose, alter, or disrupt affected WordPress site data or services.

CVE-2026-118078: WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

Which plugin versions are affected?

What is the potential impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which plugin versions are affected?

What is the potential impact if exploited?