Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2025-1505 The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up t…

Advanced Ajax Product Filters 1.6.8.2+ Fix from $1,6002025-02-28 MEDIUM 6.1 CVE-2021-24432 The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflec…

Advanced Ajax Product Filters 1.5.4.7+ Fix from $1,6002024-01-16 MEDIUM 5.4 CVE-2023-23667 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in BeRocket Brands for WooCommerce plugin <= 3.7.0.6 versions.

Brands For Woocommerce after 3.7.0.6 Fix from $1,6002023-05-18 MEDIUM 6.1 CVE-2022-2518 The Stockists Manager for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.2.1. Thi…

Stockists Manager For Woocommerce after 1.0.2.1 Fix from $1,6002022-09-06 MEDIUM 6.1 CVE-2022-0399 The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outp…

Advanced Product Labels For Woocommerce 1.2.3.7+ Fix from $1,6002022-03-14