Vulnerabilities

Filters

Reset all

1 selected

28 records

Sort

Vendor: impleCode Clear all filters

TI-2026-83310 CVE-2026-116851 · GHSA-jg82-c64g-hwh3

Cross-site scripting in WordPress eCommerce Product Catalog plugin

LOW 30

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0019 Published 2026-10-30 No fix listed CWE-79

TI-2026-81967 CVE-2026-115596 · GHSA-82mh-jf48-rww9

Cross-site scripting in WordPress eCommerce Product Catalog plugin

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Reflected XSS.This issue affects eCommerce Produc…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00201 Published 2026-10-28 No fix listed CWE-79

TI-2026-67663 CVE-2026-105056 · GHSA-pmhc-qhfw-fjr6

Stored cross-site scripting in eCommerce Product Catalog plugin

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product C…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-05 No fix listed CWE-79

TI-2026-63757 CVE-2026-96344 · GHSA-55c4-c658-wp4q

WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability

LOW 34

Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00359 Published 2026-09-30 No fix listed CWE-502

TI-2026-53261 CVE-2026-76128 · GHSA-483m-qrc2-mqgh

Cross-site scripting in impleCode eCommerce Product Catalog

LOW 28

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.5.10 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00356 Published 2026-08-25 No fix listed CWE-79

TI-2026-41297 CVE-2026-57360 · GHSA-3mg3-686g-v244

WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-02 No fix listed CWE-79

TI-2026-37818 CVE-2026-52693 · GHSA-rgmr-gwj7-9rrh

WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00289 Published 2026-06-15 No fix listed CWE-89

TI-2025-38384 CVE-2025-62061 · GHSA-qv29-qjr2-9hm4

WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Product Catalog Simple: from n/a through <= 1.8.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00132 Published 2025-10-22 No fix listed CWE-352

TI-2025-36636 CVE-2025-58992 · GHSA-pg5p-wgqp-m48g

WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affects Product Catalog Simple: from n/a thr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79

TI-2025-31379 CVE-2025-49331 · GHSA-4f4x-pggh-m93v

WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability

LOW 34

Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Object Injection.This issue affects eCommerce Product Catalog: from n/a through <= 3.4.3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00518 Published 2025-06-17 No fix listed CWE-502

TI-2025-31353 CVE-2025-49305 · GHSA-4p64-mj95-v5fc

WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability

LOW 28

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-06-06 No fix listed CWE-79

TI-2025-01208 CVE-2025-1405 · GHSA-jc5x-gpwr-cjq7

Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode

LOW 28

The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions up to, and including, 1.7.11 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00292 Published 2025-02-28 No fix listed CWE-79

TI-2024-11835 CVE-2024-12771 · GHSA-54wx-2j59-x6gm

eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset

MEDIUM 40

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2024-12-21 No fix listed CWE-352

TI-2024-21696 CVE-2024-32822 · GHSA-v6f7-cqmv-v5gc

WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability

LOW 22

Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-04-26 No fix listed CWE-862

TI-2024-21445 CVE-2024-32558 · GHSA-g7cc-5538-5wqv

WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a throug…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00371 Published 2024-04-18 No fix listed CWE-79

TI-2024-21332 CVE-2024-32437 · GHSA-qcr7-vfvv-xh97

WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2024-04-15 No fix listed CWE-352

TI-2023-28334 CVE-2023-51688 · GHSA-mh2c-qc7g-wvr4

WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure

LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200

TI-2023-28333 CVE-2023-51687 · GHSA-j7cq-cc9w-27rj

WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure

LOW 33

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200

TI-2023-05509 CVE-2023-5979 · GHSA-m857-f66m-vmhf

eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

LOW 29

The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00283 Published 2023-12-04 Fixed in 3.3.26 CWE-352

TI-2023-25947 CVE-2023-47839 · GHSA-mjmh-8xw4-7gg7

WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.26 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00409 Published 2023-11-22 No fix listed CWE-79

TI-2020-18912 CVE-2020-36743 · GHSA-hrmj-mxq5-4f7c

Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass

LOW 20

The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-01 Fixed in 1.5.13 CWE-352

TI-2021-03249 CVE-2021-4392 · GHSA-4jpr-x549-v9v3

eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

LOW 21

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 Fixed in 2.9.44 CWE-352

TI-2021-03250 CVE-2021-4393 · GHSA-c5pq-29m4-m3qr

eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass

LOW 21

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-07-01 Fixed in 3.0.18 CWE-352

TI-2023-13778 CVE-2023-29388 · GHSA-xh49-j9w7-xf24

WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

TI-2023-10522 CVE-2023-25049 · GHSA-xcxv-85x4-xxj3

WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-07 No fix listed CWE-79