WordPress Plugin Vulnerabilities

Ultimate Product Catalog

2022-01-06

Ultimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update

Fixed in version 5.0.26

2017-06-27

Ultimate Product Catalogue <= 4.2.2 - Authenticated SQL Injection

Fixed in version 4.2.3

2016-07-29

Ultimate Product Catalogue <= 3.9.8 - Unauthenticated Blind SQL Injection

Fixed in version 3.9.9

2015-05-04

Ultimate Product Catalogue <= 3.1.4 - Multiple Vulnerabilities

Fixed in version 3.1.5

2015-04-23

Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection

Fixed in version 3.1.3

2015-04-23

Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection

Fixed in version 3.1.3

2015-04-22

Ultimate Product Catalogue <= 3.1.1 - Unauthenticated File Upload

Fixed in version 3.1.2