WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ecommerce-product-catalog
Published
2023-03-17
Title
eCommerce Product Catalog < 3.3.9 - Admin+ Stored XSS
Slug
ecommerce-product-catalog
Published
2023-02-06
Title
eCommerce Product Catalog < 3.3.5 - Admin+ Stored XSS
Slug
ecommerce-product-catalog
Published
2021-03-01
Title
eCommerce Product Catalog < 3.0.18 - Cross-Site Request Forgery
Slug
ecommerce-product-catalog
Published
2023-11-13
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
Slug
ecommerce-product-catalog
Published
2023-11-14
Title
eCommerce Product Catalog for WordPress < 3.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ecommerce-product-catalog
Published
2023-12-27
Title
eCommerce Product Catalog < 3.3.27 - Sensitive Information Exposure via CSV Files
Slug
ecommerce-product-catalog
Published
2024-04-12
Title
eCommerce Product Catalog < 3.3.29 - Cross-Site Request Forgery
Slug
ecommerce-product-catalog
Published
2024-04-18
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.33 - Reflected Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2024-12-20
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.44 - Cross-Site Request Forgery to Password Reset
Slug
ecommerce-product-catalog
Published
2025-06-22
Title
eCommerce Product Catalog < 3.4.4 - Authenticated (Orders manager+) PHP Object Injection
Slug
ecommerce-product-catalog
Published
2026-06-09
Title
eCommerce Product Catalog Plugin for WordPress < 3.5.6 - Unauthenticated SQL Injection
Slug
ecommerce-product-catalog
Published
2026-07-01
Title
eCommerce Product Catalog Plugin for WordPress < 3.5.5 - Unauthenticated Stored Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2026-08-24
Title
eCommerce Product Catalog < 3.5.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
Slug
ecommerce-product-catalog
Published
2026-10-05
Title
eCommerce Product Catalog < 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2026-09-28
Title
eCommerce Product Catalog < 3.6.1 - Authenticated (Custom Role+) PHP Object Injection
Slug
ecommerce-product-catalog
Published
2026-10-26
Title
eCommerce Product Catalog < 3.6.5 - Reflected Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2026-10-30
Title
eCommerce Product Catalog < 3.6.6 - Unauthenticated Stored Cross-Site Scripting
Slug
ecommerce-two-factor-authentication
Published
2021-10-25
Title
Ecommerce - Two Factor Authentication < 1.0.5 - Reflected Cross-Site Scripting
Slug
ecommerce-user-profiles-by-profilegrid
Published
2026-07-08
Title
Memberships and User Profiles for WooCommerce < 3.4.1 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
Slug
ecover-builder-for-dummies
Published
2026-03-20
Title
Ecover Builder For Dummies <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
ecpay-ecommerce-for-woocommerce
Published
2025-01-30
Title
ECPay Ecommerce for WooCommerce < 1.1.2502030 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
ecpay-ecommerce-for-woocommerce
Published
2026-10-04
Title
ECPay Ecommerce for WooCommerce < 1.1.2610150 - Missing Authorization
Slug
ecpay-logistics-for-woocommerce
Published
2019-09-05
Title
ECPay Logistics for WooCommerce < 1.3.1910240 - Unauthenticated Reflected XSS
Slug
ect-add-to-cart-button
Published
2025-01-16
Title
ECT Add to Cart Button <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-homepage-products
Published
2025-01-10
Title
ECT Home Page Products <= 1.9 - Reflected XSS