CVE-2025-12975

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12975", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-10T18:30:18.891Z", "datePublished": "2026-02-19T04:36:10.601Z", "dateUpdated": "2026-04-08T16:52:05.302Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:52:05.302Z"}, "affected": [{"vendor": "wahid0003", "product": "Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Support 220+ Shopping & Social Channels", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.6.11", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The CTX Feed \u2013 WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_plugin_installing() function in all versions up to, and including, 6.6.11. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install arbitrary plugins which can be leveraged to achieve remote code execution."}], "title": "CTX Feed \u2013 WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f77f4cd-f4b3-42bc-a1a9-e5df5daa42b7?source=cve"}, {"url": "https://wordpress.org/plugins/webappick-product-feed-for-woocommerce/"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3417230%40webappick-product-feed-for-woocommerce&new=3417230%40webappick-product-feed-for-woocommerce&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "German"}], "timeline": [{"time": "2026-02-18T15:27:51.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-19T17:07:15.527914Z", "id": "CVE-2025-12975", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-19T17:37:56.018Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12975", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-19T17:07:15.527914Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-19T17:07:17.100Z"}}], "cna": {"title": "CTX Feed \u2013 WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation", "credits": [{"lang": "en", "type": "finder", "value": "German"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "wahid0003", "product": "Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Support 220+ Shopping & Social Channels", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "6.6.11"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-02-18T15:27:51.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f77f4cd-f4b3-42bc-a1a9-e5df5daa42b7?source=cve"}, {"url": "https://wordpress.org/plugins/webappick-product-feed-for-woocommerce/"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3417230%40webappick-product-feed-for-woocommerce&new=3417230%40webappick-product-feed-for-woocommerce&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The CTX Feed \u2013 WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_plugin_installing() function in all versions up to, and including, 6.6.11. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install arbitrary plugins which can be leveraged to achieve remote code execution."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-02-19T04:36:10.601Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12975", "state": "PUBLISHED", "dateUpdated": "2026-02-19T17:37:56.018Z", "dateReserved": "2025-11-10T18:30:18.891Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-02-19T04:36:10.601Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Support 220+ Shopping & Social Channels", "vendor": "wahid0003", "versions": [{"lessThanOrEqual": "6.6.11", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CTX Feed \u2013 WooCommerce Product Feed Manager plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the woo_feed_plugin_installing() function in all versions up to, and including, 6.6.11. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to install arbitrary plugins which can be leveraged to achieve remote code execution."}, {"lang": "es", "value": "El plugin CTX Feed \u2013 WooCommerce Product Feed Manager para WordPress es vulnerable a la instalaci\u00f3n arbitraria de plugins no autorizada debido a una falta de verificaci\u00f3n de capacidad en la funci\u00f3n woo_feed_plugin_installing() en todas las versiones hasta la 6.6.11, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel 'Shop Manager' o superior, instalen plugins arbitrarios que pueden ser aprovechados para lograr la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-12975", "lastModified": "2026-06-17T08:33:18.703", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12975", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-19T17:07:15.527914Z", "version": "2.0.3"}}]}, "published": "2026-02-19T07:17:29.463", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3417230%40webappick-product-feed-for-woocommerce&new=3417230%40webappick-product-feed-for-woocommerce&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/webappick-product-feed-for-woocommerce/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f77f4cd-f4b3-42bc-a1a9-e5df5daa42b7?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.6.11]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Support 220+ Shopping & Social Channels", "source": "cna", "vendor": "wahid0003"}, "product": "product_feed_for_woocommerce", "vendor": "wahid0003"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 85.0, "confidence_source": "inferred", "scores": [{"score": 85.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-21T15:56:37.434547+00:00", "value": {"mitigation_remediation": ["Upgrade the CTX Feed \u2013 WooCommerce Product Feed Manager to the latest version (6.6.12 or newer) where the capability check has been added. ", "If an immediate upgrade is not possible, remove or disable the plugin to eliminate the attack vector. ", "Re\u2011evaluate the Shop Manager role and reduce its capabilities or assign it only to trusted users to limit the opportunity for unauthorized plugin installation."], "summary": {"action": "Apply Patch", "impact": "Arbitrary plugin installation leading to remote code execution"}, "threat_synthesis": {"affected_systems": "The affected product is the CTX Feed \u2013 WooCommerce Product Feed Manager plugin for WordPress, with all releases up to and including 6.6.11. The vendor is wahid0003:Product Feed Manager for WooCommerce \u2013 CTX Feed \u2013 Support 220+ Shopping Social Channels. Sites running these versions are susceptible to the flaw.", "description_and_impact": "The vulnerability is caused by a missing capability check in the woo_feed_plugin_installing() function, which allows any authenticated user with Shop Manager or higher privileges to install arbitrary WordPress plugins. This can be leveraged to deploy malicious code, enabling remote code execution against the site. The weakness is a classic authorization bypass, identified as CWE\u2011862.", "risk_and_exploitability": "The CVSS score of 7.2 indicates high severity, while an EPSS score of less than 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog, meaning no known in\u2011use exploits have been widely reported. The likely attack vector requires authenticated access with Shop Manager capabilities, so the threat surface depends on how many users are granted that role."}}}}, "created": "2026-02-19T10:07:17.315232+00:00", "updated": "2026-04-21T16:00:13.286892+00:00", "vendors": ["wahid0003", "wahid0003$PRODUCT$product_feed_for_woocommerce", "wordpress", "wordpress$PRODUCT$wordpress"]}