Threat database

CVE-2026-103349 is a high-severity vulnerability in Rymera Web Co's Product Feed PRO for WooCommerce plugin. It involves deserialization of untrusted data leading to object injection. This affects all versions from initial releases up to 13.5.7. The vulnerability allows an attacker with high privileges to potentially execute arbitrary code or cause denial of service. No patch or vendor advisory is provided in the input data.

Subscriber SQL Injection in WC Vendors Marketplace <= 2.6.8 versions.

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through <= 2.0.3.1.

Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesale Suite: from n/a through 2.1.12.