Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: trustyplugins Clear all filters
TI-2025-23650 CVE-2025-32585 · GHSA-g97f-x473-qch6

WordPress Shop Products Filter Plugin <= 1.2 - Local File Inclusion vulnerability

Priority LOW 37

Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through <= 1.2.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00958 Published 2025-04-11 No fix listed CWE-35
TI-2024-10077 CVE-2024-10871 · GHSA-qwvp-243h-hmwf

Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion

Priority MEDIUM 50

The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.2 via the 'params[caf-post-layout]' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00787 Published 2024-11-09 No fix listed CWE-98
TI-2024-03260 CVE-2024-3495 · GHSA-5p44-j78m-mc5m

Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection

Priority MEDIUM 64

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to SQL Injection via the ‘cnt’ and 'sid' parameters in versions up to, and including, 2.7.2 due to insufficient escaping on the user supplied paramet…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13618 Published 2024-05-22 No fix listed CWE-89
TI-2024-03281 CVE-2024-3520 · GHSA-h3f8-rhr3-rhcx

Country State City Dropdown CF7 <= 2.7.1 - Missing Authorization

Priority LOW 20

The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tc_csca_patch_settings function in all versions up to, and including, 2…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00445 Published 2024-05-02 No fix listed CWE-862