All packages
CTX Feed vulnerabilities
3 known CVE vulnerabilities in CTX Feed, translated and rated.
- CVE-2026-66709Critical
The CTX Feed plugin versions up to 6.6.42 contain a Remote Code Execution (RCE) vulnerability exploitable by a shop manager. An attacker with shop manager privileges can execute arbitrary code on the server.
- CVE-2026-73383Medium
The CTX Feed plugin version 6.6.47 and earlier has an arbitrary file download vulnerability exploitable by users with the Shop manager role. This means a shop manager can download arbitrary files from the server that they should not have access to.
- CVE-2026-39434High
There is a PHP Object Injection vulnerability in the shop manager in CTX Feed versions <= 6.6.26.