Wpmarketingrobot Woocommerce Google Feed Manager vulnerabilities

CVE-2024-7258 [HIGH] CWE-862 CVE-2024-7258: The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wppfm_removeFeedFile' function in all versions up to, and including, 2.8.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary files on the server, whic

CVE-2024-3067 [HIGH] CWE-89 CVE-2024-3067: The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to SQL Injection via the 'id' The WooCommerce Google Feed Manager plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 2.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level ac

CVE-2024-29112 [MEDIUM] CWE-79 CVE-2024-29112: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Marketing Robot WooCommerce Google Feed Manager allows Stored XSS.This issue affects WooCommerce Google Feed Manager: from n/a through 2.2.0.