CPE
A PHP Object Injection vulnerability exists in the PixelYourSite Product Catalog Feed plugin (<= 3.1.4) affecting Shop manager accounts.