WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ecommerce-product-catalog
Published
2023-03-17
Title
eCommerce Product Catalog < 3.3.9 - Admin+ Stored XSS
Slug
ecommerce-product-catalog
Published
2023-02-06
Title
eCommerce Product Catalog < 3.3.5 - Admin+ Stored XSS
Slug
ecommerce-product-catalog
Published
2021-03-01
Title
eCommerce Product Catalog < 3.0.18 - Cross-Site Request Forgery
Slug
ecommerce-product-catalog
Published
2023-11-13
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
Slug
ecommerce-product-catalog
Published
2023-11-14
Title
eCommerce Product Catalog for WordPress < 3.3.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ecommerce-product-catalog
Published
2023-12-27
Title
eCommerce Product Catalog < 3.3.27 - Sensitive Information Exposure via CSV Files
Slug
ecommerce-product-catalog
Published
2024-04-12
Title
eCommerce Product Catalog < 3.3.29 - Cross-Site Request Forgery
Slug
ecommerce-product-catalog
Published
2024-04-18
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.33 - Reflected Cross-Site Scripting
Slug
ecommerce-product-catalog
Published
2024-12-20
Title
eCommerce Product Catalog Plugin for WordPress < 3.3.44 - Cross-Site Request Forgery to Password Reset
Slug
ecommerce-product-catalog
Published
2025-06-22
Title
eCommerce Product Catalog < 3.4.4 - Authenticated (Orders manager+) PHP Object Injection
Slug
ecommerce-two-factor-authentication
Published
2021-10-25
Title
Ecommerce - Two Factor Authentication < 1.0.5 - Reflected Cross-Site Scripting
Slug
ecover-builder-for-dummies
Published
2026-03-20
Title
Ecover Builder For Dummies <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
ecpay-ecommerce-for-woocommerce
Published
2025-01-30
Title
ECPay Ecommerce for WooCommerce < 1.1.2502030 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
ecpay-logistics-for-woocommerce
Published
2019-09-05
Title
ECPay Logistics for WooCommerce < 1.3.1910240 - Unauthenticated Reflected XSS
Slug
ect-add-to-cart-button
Published
2025-01-16
Title
ECT Add to Cart Button <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-homepage-products
Published
2025-01-10
Title
ECT Home Page Products <= 1.9 - Reflected XSS
Slug
ect-product-carousel
Published
2024-12-12
Title
ECT Product Carousel <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-social-share
Published
2024-12-12
Title
ECT Social Share <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2016-08-08
Title
Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object Injection
Slug
ecwid-shopping-cart
Published
2022-08-04
Title
Ecwid Ecommerce Shopping Cart < 6.10.24 - Settings Update via CSRF
Slug
ecwid-shopping-cart
Published
2023-01-27
Title
Ecwid Shopping Cart < 6.11.4 - Import via CSRF
Slug
ecwid-shopping-cart
Published
2023-03-17
Title
Ecwid Shopping Cart < 6.11.5 - Contributor+ Stored Cross-Site Scriping
Slug
ecwid-shopping-cart
Published
2022-07-09
Title
Ecwid Shopping Cart < 6.10.23 - Insufficient Access Control
Slug
ecwid-shopping-cart
Published
2023-11-21
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF
Slug
ecwid-shopping-cart
Published
2023-11-28
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Cross-Site Request Forgery