Browse CVEs

MEDIUM 5.4 CVE-2025-1405 The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions… Product Catalog Simple 1.8.0+ Fix from $1,6002025-02-28 HIGH 7.5 CVE-2023-51687 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simpl… Product Catalog Simple 1.7.7+ Fix from $1,9502023-12-29 HIGH 7.5 CVE-2023-51688 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affec… Ecommerce Product Catalog 3.3.27+ Fix from $1,9502023-12-29 MEDIUM 6.5 CVE-2023-5979 The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attac… Ecommerce Product Catalog 3.3.26+ Fix from $1,6002023-12-04 MEDIUM 5.4 CVE-2023-47839 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for … Ecommerce Product Catalog after 3.3.26 Fix from $1,6002023-11-23 MEDIUM 6.1 CVE-2023-29388 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions. Product Catalog Simple 1.7.0+ Fix from $1,6002023-04-07 MEDIUM 6.5 CVE-2021-24894 The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Serv… Reviews Plus 1.2.14+ Fix from $1,6002021-11-23 MEDIUM 6.1 CVE-2021-24875 The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in… Ecommerce Product Catalog 3.0.39+ Fix from $1,6002021-11-23