Vulnerabilities

TI-2023-28334 CVE-2023-51688 · GHSA-mh2c-qc7g-wvr4

WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure

LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200

TI-2023-05509 CVE-2023-5979 · GHSA-m857-f66m-vmhf

eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

LOW 29

The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00283 Published 2023-12-04 Fixed in 3.3.26 CWE-352

TI-2023-25947 CVE-2023-47839 · GHSA-mjmh-8xw4-7gg7

WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.26 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00409 Published 2023-11-22 No fix listed CWE-79

TI-2021-03249 CVE-2021-4392 · GHSA-4jpr-x549-v9v3

eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

LOW 21

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 Fixed in 2.9.44 CWE-352

TI-2021-03250 CVE-2021-4393 · GHSA-c5pq-29m4-m3qr

eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass

LOW 21

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 Fixed in 3.0.18 CWE-352

TI-2023-10522 CVE-2023-25049 · GHSA-xcxv-85x4-xxj3

WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-07 No fix listed CWE-79

TI-2023-01389 CVE-2023-1470 · GHSA-mc99-r3pp-6w3q

eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 22

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00377 Published 2023-03-17 No fix listed CWE-79

TI-2021-07157 CVE-2021-24875 · GHSA-wg38-4947-72vf

eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting

LOW 31

The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01655 Published 2021-11-23 Fixed in 3.0.39 CWE-79

Vulnerabilities

Filters