Approved changes feed: RSS · Atom

cpe:2.3:a:gutengeek:gg_woo_feed:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorGutengeek (ec40f817-022c-5ee5-8e20-ba03405cc44b)
ProductGg Woo Feed (98b809f3-fbdd-550d-893a-e4223072678c)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6638 vulnerable 2026-06-08 06:21:55.187660 GTG Product Feed for Shopping <= 1.2.4 - Missing Authorization to Unauthenticated Plugin Settings Update
MEDIUM (6.5)
The GTG Product Feed for Shopping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_settings' function in versions up to, and including, 1.2.4. This makes it possible for unauthenticated attackers to update plugin settings.
Published: 2024-01-11T08:33:00.702Z
Updated: 2026-04-08T17:24:24.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.