Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: PluginUs.Net Clear all filters
TI-2026-82350 CVE-2026-115611 · GHSA-5h7f-5g53-7v2r

Reflected cross-site scripting in WordPress TableOn plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0019 Published 2026-10-29 No fix listed CWE-79
TI-2026-74857 CVE-2026-108175

Stored cross-site scripting in WordPress MDTF plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00156 Published 2026-10-15 No fix listed CWE-79
TI-2026-74365 CVE-2026-108151

Code injection in MDTF WordPress plugin

Priority LOW 30

Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00244 Published 2026-10-14 No fix listed CWE-94
TI-2026-71608 CVE-2026-108179 · GHSA-rpwq-w7r7-jfr2

SQL injection in PluginUs.Net WOLF WordPress plugin

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00236 Published 2026-10-13 No fix listed CWE-89
TI-2026-71611 CVE-2026-108489 · GHSA-r6wq-qmmc-9265

Sensitive data exposure in Active Products Tables for WooCommerce

Priority LOW 29

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Act…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.002 Published 2026-10-13 No fix listed CWE-201
TI-2026-71607 CVE-2026-108174 · GHSA-w4q6-xcqh-hwwq

Missing authorization in PluginUs.Net FOX WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00178 Published 2026-10-13 No fix listed CWE-862
TI-2026-69940 CVE-2026-95608 · GHSA-6qw3-gfg3-x24r

WordPress HUSKY plugin reflected cross-site scripting (XSS)

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-09 No fix listed CWE-79