Product Catalog Feed (<= 3.1.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/product-catalog-feed--3.1.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 17:36:58 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPixelYourSite Product Catalog Feed: PHP Object Injection (CVE-2026-118078)https://feed.craftedsignal.io/briefs/2026-10-pixelyoursite-cve-2026-118078/Thu, 29 Oct 2026 17:36:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-pixelyoursite-cve-2026-118078/A PHP Object Injection vulnerability exists in the PixelYourSite Product Catalog Feed plugin (<= 3.1.4) affecting Shop manager accounts.<p>CVE-2026-118078 identifies a PHP Object Injection vulnerability in the PixelYourSite Product Catalog Feed plugin, version 3.1.4 and earlier. The vulnerability is exploitable by users with Shop manager privileges.</p> highadvisory