prodigycommerce

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

prodigycommerce records in CISA KEV

No prodigycommerce vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-00699 CVE-2026-0926 · GHSA-27f4-925x-grx7

Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

MEDIUM 61

The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09304 Published 2026-02-19 No fix listed CWE-98

TI-2024-36340 CVE-2024-54251 · GHSA-9wjp-m7pw-vf4c

WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through <= 3.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00487 Published 2024-12-09 No fix listed CWE-862

TI-2024-36339 CVE-2024-54250 · GHSA-4m49-wchq-72x6

WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows DOM-Based XSS.This issue affects Prodigy Commerce: from n/a t…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00408 Published 2024-12-13 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0