Plugin icon

CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce

woocommerce-catalog-enquiry

Vulnerabilities:

4

Last Updated:

December 5, 2025

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2024-02-20
Title
Product Catalog Enquiry for WooCommerce by MultiVendorX < 5.0.6 - Cross-Site Request Forgery via REST API
Fixed in
Fixed in 5.0.6
CVSS
4.3 (medium)
Published
2023-11-21
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
Fixed in
Fixed in 5.0.3
CVSS
8.8 (high)
Published
2023-11-03
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Inquiry Saving & Sensitive Information Disclosure
Fixed in
Fixed in 5.0.3
CVSS
6.5 (medium)
Published
2017-04-20
Title
WooCommerce Catalog Enquiry - Arbitrary File Upload
Fixed in
Fixed in 3.1.0
CVSS
7.5 (high)