Read the docs

WP Lab

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

WP Lab records in CISA KEV

No WP Lab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-lister Lite For Amazon 1 record MEDIUM Wp-lister Lite For Ebay 1 record LOW

Records

14 records

TI-2024-24776 CVE-2024-37261 · GHSA-8fff-pwm7-53j5

WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00624 Published 2024-07-22 No fix listed CWE-79
TI-2026-15240 CVE-2026-18595 · GHSA-2g6g-5w2g-6pf8

WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request

Priority LOW 38

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via AJAX Cron Handler Request Parameter in all versions up to, and including, 3.8.9 due to insufficient input sanitization and…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00318 Published 2026-09-16 No fix listed CWE-79
TI-2024-31698 CVE-2024-47380 · GHSA-8h8h-m4q6-r9hq

WordPress WP-Lister Lite for eBay plugin <= 3.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Reflected XSS.This issue affects WP-Lister Lite for eBay: fro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0032 Published 2024-10-05 No fix listed CWE-79
TI-2024-28958 CVE-2024-43306 · GHSA-3873-529g-4g7g

WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.6.…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00289 Published 2024-08-18 No fix listed CWE-79
TI-2024-19945 CVE-2024-30199 · GHSA-972c-hvjh-fh38

WordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-27 No fix listed CWE-79
TI-2024-14894 CVE-2024-22307 · GHSA-qr6c-pgxx-rqc6

WordPress WP-Lister Lite for eBay plugin <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.5.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00334 Published 2024-01-31 No fix listed CWE-79
TI-2026-86459 CVE-2026-121778 · GHSA-7wrj-jp98-f9qp

Missing authorization in WP-Lister Lite for Amazon WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for Amazon: from n/a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-11-07 No fix listed CWE-862
TI-2024-21460 CVE-2024-32573 · GHSA-2425-64hv-g99c

WordPress WP-Lister Lite for eBay plugin <=3.5.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.5.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00342 Published 2024-04-18 No fix listed CWE-79
TI-2024-02697 CVE-2024-2889 · GHSA-56mr-5wh4-v4mf

WordPress WP-Lister Lite for Amazon plugin <= 2.6.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon.This issue affects WP-Lister Lite for Amazon: from n/a through <…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00357 Published 2024-03-26 No fix listed CWE-79
TI-2026-10317 CVE-2026-11973 · GHSA-hhq3-85v9-3wjh

WP-Lister Lite for eBay <= 3.8.8 - Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter

Priority LOW 23

The WP-Lister Lite for eBay plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00506 Published 2026-07-29 No fix listed CWE-89
TI-2025-39031 CVE-2025-62881 · GHSA-h5wc-wh24-wmj3

WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00236 Published 2025-10-27 No fix listed CWE-862
Open these records in search →