WooCommerce Product Feed Manager 反射型XSS漏洞(CVE-2026-15306)

漏洞概述 漏洞名称: Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter CVE ID: CVE-2026-15306 CVSS评分: 6.1 (Medium) 发布日期: July 15, 2026 最后更新日期: July 16, 2026 研究人员: PRISM - Wordfence 影响范围 软件类型: Plugin 软件Slug: best-woocommerce-feed 受影响版本: <= 7.6.1 修复版本: 7.6.2 修复方案 修复措施: 更新到版本 7.6.2 或更新的已修补版本 其他信息 漏洞描述: Product Feed Manager For WooCommerce 插件存在反射型跨站脚本漏洞，攻击者可以通过 's' 搜索参数注入恶意脚本，导致用户点击链接时执行任意脚本。 参考链接: - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org - plugins.trac.wordpress.org 近期漏洞 Product Feed Manager <= 7.3.15 - Authenticated (Admin+) Directory Traversal - CVE ID: CVE-2023-52144 - CVSS评分: 2.7 - 研究人员: Muhammad Daffa - 发布日期: December 28, 2023 Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update - CVE ID: 未提供 - CVSS评分: 8.8 - 研究人员: 未提供 - 发布日期: February 25, 2019 备注 该漏洞数据库完全免费供个人和商业使用，包含所有相同的漏洞数据。 提供API文档和Webhook文档，方便查询漏洞API端点和配置Webhook。 联系方式 业务时间: 9am-8pm ET, 6am-5pm PT 和 2pm-1am UTC/GMT（不包括周末和节假日） 支持时间: 365天，1小时响应时间 其他链接 Terms of Service Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information 社交媒体 X Facebook LinkedIn Instagram 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog In The News Vulnerability Advisories 关于 About Wordfence Affiliate Program Employment Contact Security CVE Request Form 订阅 订阅新闻和更新，获取经验丰富的安全专业人士的面板。 版权信息 © 2012-2026 Defiant Inc. All Rights Reserved 其他产品 Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central 支持 Documentation Learning Center Free Support Premium Support 新闻 Blog [In The News](https://www.word

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

WooCommerce Product Feed Manager 反射型XSS漏洞(CVE-2026-15306)

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

WooCommerce Product Feed Manager 反射型XSS漏洞(CVE-2026-15306)

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！