Plugin icon

Product Catalog Simple

post-type-x

Vulnerabilities:

9

Last Updated:

August 21, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-10-16
Title
Product Catalog Simple < 1.8.5 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.5
CVSS
4.3 (medium)
Published
2025-09-22
Title
Product Catalog Simple < 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.3
CVSS
6.4 (medium)
Published
2025-06-05
Title
Product Catalog Simple < 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.2
CVSS
6.4 (medium)
Published
2025-02-27
Title
Product Catalog Simple < 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode
Fixed in
Fixed in 1.8.0
CVSS
6.4 (medium)
Published
2023-12-27
Title
Product Catalog Simple < 1.7.7 - Sensitive Information Exposure via Product CSV
Fixed in
Fixed in 1.7.7
CVSS
5.3 (medium)
Published
2023-11-08
Title
Product Catalog Simple < 1.7.6 - Cross-Site Request Forgery via ic_system_status
Fixed in
Fixed in 1.7.6
CVSS
4.3 (medium)
Published
2023-04-06
Title
Product Catalog Simple < 1.7.0 - Reflected XSS
Fixed in
Fixed in 1.7.0
CVSS
7.5 (high)
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.5.13
CVSS
5.4 (medium)
Published
2020-09-16
Title
Product Catalog Simple < 1.5.13 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.13
CVSS
4.3 (medium)