Zero Day Monitor
ZDM
Dashboard
Vulnerabilities
Trending
Zero-Days
News
About
Login
CVE-2026-59553: WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability — Zero Day Monitor
← Back to list
7.1
CVE-2026-59553
KEV
EXPLOITED
rextheme · product feed manager
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
Description
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
Affected Products
Vendor
Product
Versions
rextheme
product feed manager
n/a
References
https://patchstack.com/database/wordpress/plugin/best-woocommerce-feed/vulnerability/wordpress-product-feed-manager-plugin-7-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
(vdb-entry)
Related News (1 articles)
Tier C
VulDB
4h ago
CVE-2026-59553 | Rexme Product Feed Manager Plugin up to 7.6.1 on WordPress cross site scripting
→ No new info (linked only)
CVSS 3.1
7.1
HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CISA KEV
✅ Yes
Actively exploited
✅ Yes
CWE
CWE-79
Published
Jul 27, 2026
Trending Score
95
Source articles
1
Independent
1
Info Completeness
0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack
Community Vote
0
Login to vote
0 upvotes
0 downvotes
No votes yet
Related CVEs (2)
HIGH
CVE-2026-57417
WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
Trending: 5
MEDIUM
CVE-2026-15306
Product Feed Manager For WooCommerce <= 7.6.1 - Reflected Cross-Site Scripting via 's' Search Parameter
Trending: 5
Pin to Dashboard
Verification
State:
unverified
Confidence:
0%
Vulnerability Timeline
CVE Published
Jul 27, 2026
Added to CISA KEV
Jul 27, 2026
Actively Exploited
Jul 27, 2026
Discovered by ZDM
Jul 27, 2026
