VendorsimpleCodeecommerce_product_catalogany version
Vulnerabilities

impleCode eCommerce Product Catalog any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-51688
WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure
Published 2023-12-29 · Modified
7.5EPSS 0.005
CVE-2023-47839
WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)
Published 2023-11-22 · Modified
6.5EPSS 0.004
CVE-2023-5979
eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
Published 2023-12-04 · Modified
6.5EPSS 0.003
CVE-2021-24875
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
Published 2021-11-23 · Modified
6.1EPSS 0.017
CVE-2023-25049
WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-07 · Modified
5.9EPSS 0.004
CVE-2023-1470
eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2023-03-17 · Modified
4.8EPSS 0.004
CVE-2021-4392
eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
Published 2023-07-01 · Modified
4.3EPSS 0.005
CVE-2021-4393
eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass
Published 2023-07-01 · Modified
4.3EPSS 0.005