CVE-2026-125814: WordPress Product Feed PRO for WooCommerce plugin <= 13.5.8 - Content Injection vulnerability
Published Nov 13, 2026
·Updated
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Code Injection.This issue affects Product Feed PRO for WooCommerce: from n/a through 13.5.8.
Affected Software
1 affected component
Rymera Web Co Product Feed PRO for WooCommerce<=13.5.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.5.9
Event History
Nov 13, 2026
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:18 PM
DescriptionSeverityWeakness