Plugin icon

CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce

woocommerce-catalog-enquiry

Vulnerabilities:

6

Last Updated:

October 6, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-09-07
Title
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce < 6.1.6 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 6.1.6
CVSS
7.3 (high)
Published
2026-08-31
Title
CatalogX < 6.1.3 - Unauthenticated Email Content Injection via Shared Transient
Fixed in
Fixed in 6.1.3
CVSS
4.3 (medium)
Published
2024-02-20
Title
Product Catalog Enquiry for WooCommerce by MultiVendorX < 5.0.6 - Cross-Site Request Forgery via REST API
Fixed in
Fixed in 5.0.6
CVSS
4.3 (medium)
Published
2023-11-21
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update
Fixed in
Fixed in 5.0.3
CVSS
8.8 (high)
Published
2023-11-03
Title
Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Inquiry Saving & Sensitive Information Disclosure
Fixed in
Fixed in 5.0.3
CVSS
6.5 (medium)
Published
2017-04-20
Title
WooCommerce Catalog Enquiry - Arbitrary File Upload
Fixed in
Fixed in 3.1.0
CVSS
7.5 (high)