Known Vulnerabilities for Plugin Feed by Tenable
Listed below are 1 of the newest known vulnerabilities associated with "Plugin Feed" by "Tenable".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-15306 json | The Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces plugin for WordPress is vulnerable to Reflected... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-13357 json | The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up t... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-13252 json | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vu... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-13251 json | The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-12002 json | The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Cross-Site Request For... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-10724 json | The Reviews Feed WordPress plugin before 2.6.5 does not neutralize WordPress shortcodes contained in third-party review cont... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-8976 json | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vu... | Not Provided | 2026-06-06 | 2026-06-06 |
| CVE-2026-5159 json | The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widge... | Not Provided | 2026-05-05 | 2026-05-05 |
| CVE-2026-4070 json | The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... | Not Provided | 2026-05-22 | 2026-05-23 |
| CVE-2025-14726 json | The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data ... | Not Provided | 2026-05-02 | 2026-05-04 |