Plugin icon

Ultimate Product Catalog

ultimate-product-catalogue

Vulnerabilities:

9

Last Updated:

December 9, 2025

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2024-04-10
Title
Ultimate Product Catalogue < 5.2.16 - Cross-Site Request Forgery via reset_settings()
Fixed in
Fixed in 5.2.16
CVSS
4.3 (medium)
Published
2023-06-05
Title
Ultimate Product Catalog < 5.2.6 - Admin+ Stored XSS
Fixed in
Fixed in 5.2.6
CVSS
3.5 (low)
Published
2022-01-06
Title
Ultimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update
Fixed in
Fixed in 5.0.26
CVSS
4.3 (medium)
Published
2017-06-27
Title
Ultimate Product Catalogue <= 4.2.2 - Authenticated SQL Injection
Fixed in
Fixed in 4.2.3
CVSS
n/a
Published
2016-07-29
Title
Ultimate Product Catalogue <= 3.9.8 - Unauthenticated Blind SQL Injection
Fixed in
Fixed in 3.9.9
CVSS
n/a
Published
2015-05-04
Title
Ultimate Product Catalogue <= 3.1.4 - Multiple Vulnerabilities
Fixed in
Fixed in 3.1.5
CVSS
n/a
Published
2015-04-23
Title
Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.1.3
CVSS
n/a
Published
2015-04-23
Title
Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.1.3
CVSS
n/a
Published
2015-04-22
Title
Ultimate Product Catalogue <= 3.1.1 - Unauthenticated File Upload
Fixed in
Fixed in 3.1.2
CVSS
n/a