Plugin icon

eCommerce Product Catalog

ecommerce-product-catalog

Vulnerabilities:

18

Last Updated:

August 20, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-07-01
Title
eCommerce Product Catalog Plugin for WordPress < 3.5.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.5.5
CVSS
7.2 (high)
Published
2026-06-09
Title
eCommerce Product Catalog Plugin for WordPress < 3.5.6 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.5.6
CVSS
7.5 (high)
Published
2025-06-22
Title
eCommerce Product Catalog < 3.4.4 - Authenticated (Orders manager+) PHP Object Injection
Fixed in
Fixed in 3.4.4
CVSS
6.6 (medium)
Published
2024-12-20
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.44 - Cross-Site Request Forgery to Password Reset
Fixed in
Fixed in 3.3.44
CVSS
8.8 (high)
Published
2024-04-18
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.33 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.3.33
CVSS
6.1 (medium)
Published
2024-04-12
Title
eCommerce Product Catalog < 3.3.29 - Cross-Site Request Forgery
Fixed in
Fixed in 3.3.29
CVSS
4.3 (medium)
Published
2023-12-27
Title
eCommerce Product Catalog < 3.3.27 - Sensitive Information Exposure via CSV Files
Fixed in
Fixed in 3.3.27
CVSS
5.3 (medium)
Published
2023-11-14
Title
eCommerce Product Catalog for WordPress < 3.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 3.3.27
CVSS
6.4 (medium)
Published
2023-11-13
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
Fixed in
Fixed in 3.3.26
CVSS
4.3 (medium)
Published
2023-03-17
Title
eCommerce Product Catalog < 3.3.9 - Admin+ Stored XSS
Fixed in
Fixed in 3.3.9
CVSS
3.5 (low)
Published
2023-02-06
Title
eCommerce Product Catalog < 3.3.5 - Admin+ Stored XSS
Fixed in
Fixed in 3.3.5
CVSS
3.5 (low)
Published
2022-10-17
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.72 - Reflected XSS
Fixed in
Fixed in 3.0.72
CVSS
6.1 (medium)
Published
2022-10-17
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.72 - Reflected XSS via AJAX
Fixed in
Fixed in 3.0.72
CVSS
6.1 (medium)
Published
2022-10-10
Title
eCommerce Product Catalog Plugin for WordPress < 3.0.71 - Reflected XSS
Fixed in
Fixed in 3.0.71
CVSS
6.1 (medium)
Published
2021-10-25
Title
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.39
CVSS
8.8 (high)
Published
2021-03-01
Title
eCommerce Product Catalog < 3.0.18 - Cross-Site Request Forgery
Fixed in
Fixed in 3.0.18
CVSS
4.3 (medium)
Published
2021-02-17
Title
eCommerce Product Catalog < 3.0.18 - CSRF Nonce Bypass
Fixed in
Fixed in 3.0.18
CVSS
4.3 (medium)
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.9.44
CVSS
5.4 (medium)