Browse CVEs

HIGH 7.2 CVE-2024-3061 The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includ… Husky Products Filter Professional For Woocommerce 1.3.5.3+ Fix from $1,9502024-03-29 MEDIUM 6.1 CVE-2024-30200 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue… Bear Woocommerce Bulk Editor And Products Manager Professional 1.1.4.3+ Fix from $1,6002024-03-28 MEDIUM 6.1 CVE-2024-29763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies F… Wordpress Meta Data And Taxonomies Filter 1.3.3.1+ Fix from $1,6002024-03-27 MEDIUM 5.4 CVE-2024-29932 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies F… Wordpress Meta Data And Taxonomies Filter 1.3.3+ Fix from $1,6002024-03-27 MEDIUM 5.4 CVE-2024-29906 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies F… Wordpress Meta Data And Taxonomies Filter 1.3.3+ Fix from $1,6002024-03-27 MEDIUM 6.5 CVE-2024-24835 Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4. Bear Woocommerce Bulk Editor And Products Manager Professional 1.1.4.1+ Fix from $1,6002024-03-23 HIGH 8.8 CVE-2023-50861 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Prod… Husky Products Filter Professional For Woocommerce 1.3.4.4+ Fix from $1,9502024-03-15 MEDIUM 5.4 CVE-2024-1796 The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'woof' sh… Husky Products Filter Professional For Woocommerce 1.3.5.2+ Fix from $1,6002024-03-15 HIGH 8.8 CVE-2024-1795 The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof sho… Husky Products Filter Professional For Woocommerce after 1.3.5.2 Fix from $1,9502024-03-15 MEDIUM 5.4 CVE-2023-51480 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommer… Woot after 1.0.6 Fix from $1,6002024-02-10 MEDIUM 5.4 CVE-2023-51506 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher P… Wordpress Currency Switcher after 1.2.0 Fix from $1,6002024-02-01 MEDIUM 6.1 CVE-2024-22159 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor a… Wolf Wordpress Posts Bulk Editor And Products Manager Professional after 1.0.8 Fix from $1,6002024-01-31 HIGH 8.8 CVE-2021-24566 The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode. Fox Currency Switcher Professional For Woocommerce 1.3.7+ Fix from $1,9502024-01-16 MEDIUM 5.4 CVE-2023-6556 The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in al… Fox Currency Switcher Professional For Woocommerce after 1.4.1.5 Fix from $1,6002024-01-11 CRITICAL 9.8 CVE-2023-51505 Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce st… Woot after 1.0.6 Fix from $2,3002023-12-29 CRITICAL 9.8 CVE-2023-40010 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in realmag777 HUSKY – Products Filter for WooComme… Husky Products Filter Professional For Woocommerce 1.3.4.3+ Fix from $2,3002023-12-20 HIGH 8.8 CVE-2023-49834 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency … Fox Currency Switcher Professional For Woocommerce 1.4.1.5+ Fix from $1,9502023-12-17 HIGH 8.8 CVE-2023-46152 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions. Wolf Wordpress Posts Bulk Editor And Products Manager Professional 1.0.7.2+ Fix from $1,9502023-10-25 HIGH 8.8 CVE-2023-4920 The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect non… Bear Woocommerce Bulk Editor And Products Manager Professional after 1.1.3.3 Fix from $1,9502023-10-20 MEDIUM 6.1 CVE-2023-31218 Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Man… Wolf Wordpress Posts Bulk Editor And Products Manager Professional 1.0.7+ Fix from $1,6002023-08-18 HIGH 8.8 CVE-2023-34028 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7 versions. Wolf Wordpress Posts Bulk Editor And Manager Professional after 1.0.7 Fix from $1,9502023-06-22 MEDIUM 5.4 CVE-2023-2558 The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcs_current_c… Wordpress Currency Switcher Professional after 1.1.9 Fix from $1,6002023-06-09 HIGH 8.8 CVE-2023-33314 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions. Bear Woocommerce Bulk Editor And Products Manager Professional 1.1.3.2+ Fix from $1,9502023-05-28 MEDIUM 5.4 CVE-2023-28664 The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_… Wordpress Meta Data And Taxonomies Filter after 1.3.1 Fix from $1,6002023-03-22 MEDIUM 5.4 CVE-2023-28666 The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to … Inpost Gallery after 2.1.4.1 Fix from $1,6002023-03-22 HIGH 7.2 CVE-2022-4489 The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to pe… Husky Products Filter Professional For Woocommerce 1.3.2+ Fix from $1,9502023-02-06 MEDIUM 5.4 CVE-2022-4431 The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, whic… Fox Currency Switcher Professional For Woocommerce 1.3.9.4+ Fix from $1,6002023-01-16 CRITICAL 9.8 CVE-2022-4063EPSS 10% The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force th… Inpost Gallery 2.1.4.1+ Fix from $2,3002022-12-19 MEDIUM 6.1 CVE-2022-1916 The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and es… Woot 1.0.5+ Fix from $1,6002022-06-27 MEDIUM 6.1 CVE-2022-0234 The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJA… Woocs 1.3.7.5+ Fix from $1,6002022-02-21