Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how realmag777 compares to other vendors in security performance

View Risk Score →

Software

realmag777 bear
4
realmag777 tableon
4
realmag777 wolf
4
realmag777 active products tables for woocommerce
3
realmag777 husky
3
realmag777 wordpress meta data and taxonomies filter
3
realmag777 fox woocommerce currency switcher
2
realmag777 husky – products filter for woocommerce
2
realmag777 inpost gallery
2
realmag777 wordpress meta data and taxonomies filter (mdtf)
2
realmag777 bear woo-bulk-editor
1
realmag777 bear – bulk editor and products manager professional for woocommerce
1
realmag777 google map targeting
1
realmag777 husky (woocommerce-products-filter)
1
realmag777 mdtf
1
realmag777 mdtf (wp-meta-data-filter-and-taxonomy-filter)
1
realmag777 mdtf wp-meta-data-filter-and-taxonomy-filter
1
realmag777 tableon – wordpress posts table filterable
1
realmag777 wolf – wordpress posts bulk editor and manager professional
1
realmag777 woocs – woocommerce currency switcher
1
realmag777 wordpress currency switcher professional (wpcs)
1
realmag777 wordpress mdtf – meta data and taxonomies filter
1
realmag777 wp-meta-data-filter-and-taxonomy-filter (mdtf)
1
realmag777 wpcs
1

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.9.

First published (updated )
CVE-2026-42761

RealMag777 TableOnWordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

First published (updated )
CVE-2026-42755

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.8.

First published (updated )
CVE-2026-42727

RealMag777 BEAR woo-bulk-editorWordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability

Risk 47
Severity
7.6
SQL Injection
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.

First published (updated )
CVE-2026-45213

RealMag777 FOX WooCommerce Currency SwitcherWordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through <= 1.4.5.

First published (updated )
CVE-2026-39501

RealMag777 FOX WooCommerce Currency SwitcherWordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability

Risk 47
Severity
7.6
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through <= 1.4.5.

First published (updated )
CVE-2026-39497

realmag777 WOLFWordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability

Risk 35
Severity
7.6
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through <= 1.0.8.7.

First published (updated )
CVE-2026-32458

RealMag777 TableOnWordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability

Risk 50
Severity
7.1
XSS, Code Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

First published (updated )
CVE-2025-60244

RealMag777 wp-meta-data-filter-and-taxonomy-filter (MDTF)WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.6.

First published (updated )
CVE-2025-62964

RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filterWordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through <= 1.3.3.8.

First published (updated )
CVE-2025-62069

RealMag777 MDTFWordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability

Risk 22
Severity
4.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.3.9.

First published (updated )
CVE-2025-49907

RealMag777 InPost GalleryWordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability

Risk 70
Severity
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 InPost Gallery allows PHP Local File Inclusion. This issue affects InPost Gallery: from n/a through 2.1.4.5.

1 / 2
Source: NVD

Remedy

Update the WordPress InPost Gallery plugin to the latest available version (at least 2.1.4.6).
First published (updated )
CVE-2025-57889

RealMag777 MDTF (wp-meta-data-filter-and-taxonomy-filter)WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability

Risk 61
Severity
9.3
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 MDTF allows SQL Injection. This issue affects MDTF: from n/a through 1.3.3.7.

1 / 2
Source: NVD

Remedy

Update the WordPress MDTF plugin to the latest available version (at least 1.3.3.8).
First published (updated )
CVE-2025-54707

RealMag777 Google Map TargetingWordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 GMap Targeting gmap-targeting allows PHP Local File Inclusion.This issue affects GMap Targeting: from n/a through <= 1.1.6.

1 / 2
Source: MITRE

Remedy

Update the WordPress Google Map Targeting plugin to the latest available version (at least 1.1.7).
First published (updated )
CVE-2025-52732

realmag777 HUSKYWordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Risk 51
Severity
7.5
EPSS
0.11%
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY allows PHP Local File Inclusion. This issue affects HUSKY: from n/a through 1.3.7.

1 / 2
Source: NVD

Remedy

Update the WordPress HUSKY plugin to the latest available version (at least 1.3.7.1).
First published (updated )
CVE-2025-52708

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability

Risk 34
Severity
6.5
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce allows Stored XSS. This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.8.

1 / 2
Source: NVD

Remedy

Update the WordPress Active Products Tables for WooCommerce plugin to the latest available version (at least 1.0.6.9).
First published (updated )
CVE-2025-48266

RealMag777 TableOnWordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 TableOn – WordPress Posts Table Filterable allows Stored XSS. This issue affects TableOn – WordPress Posts Table Filterable: from n/a through 1.0.3.

1 / 2
Source: NVD

Remedy

Update the WordPress TableOn – WordPress Posts Table Filterable wordpress plugin to the latest available version (at least 1.0.4).
First published (updated )
CVE-2025-32592

RealMag777 InPost GalleryWordPress InPost Gallery plugin <= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 22
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in RealMag777 InPost Gallery allows Cross Site Request Forgery. This issue affects InPost Gallery: from n/a through 2.1.4.3.

1 / 2
Source: NVD

Remedy

Update the WordPress InPost Gallery plugin to the latest available version (at least 2.1.4.4).
First published (updated )
CVE-2025-26903

RealMag777 TableOn – WordPress Posts Table FilterableWordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability

Risk 61
Severity
9.8
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in RealMag777 TableOn – WordPress Posts Table Filterable allows Object Injection. This issue affects TableOn – WordPress Posts Table Filterable: from n/a through 1.0.2.

1 / 2
Source: NVD
First published (updated )
CVE-2025-32569

RealMag777 TableOnWordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability

Risk 25
Severity
5.4
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in RealMag777 TableOn – WordPress Posts Table Filterable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TableOn – WordPress Posts Table Filterable: from n/a through 1.0.4.

1 / 2
Source: NVD
First published (updated )
CVE-2025-32218

RealMag777 HUSKY (woocommerce-products-filter)WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability

Risk 35
Severity
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY woocommerce-products-filter allows PHP Local File Inclusion.This issue affects HUSKY: from n/a through <= 1.3.6.4.

Remedy

Update the WordPress HUSKY plugin to the latest available version (at least 1.3.6.5).
First published (updated )
CVE-2025-26890

RealMag777 BEARWordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability

Risk 22
Severity
5.9
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.

Remedy

Update the WordPress BEAR wordpress plugin to the latest available version (at least 1.1.4.5).
First published (updated )
CVE-2025-26775

Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional WordpressWordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability

Risk 28
Severity
7.5
EPSS
0.04%
Path Traversal
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a through <= 1.0.8.5.

First published (updated )
CVE-2025-24605

realmag777 HUSKYWordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.

Remedy

Update the WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) plugin to the latest available version (at least 1.3.4.3).
First published (updated )
CVE-2023-40334

Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional WordpressWordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability

Risk 79
Severity
8.8
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a through <= 1.0.8.3.

Remedy

Update to 1.0.8.4 or a higher version.
First published (updated )
CVE-2024-52396

Pluginus Husky - Products Filter Professional For Woocommerce WordpressWordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability

Risk 72
Severity
9.1
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1.

Remedy

Update to 1.3.6.2 or a higher version.
First published (updated )
CVE-2024-43121

realmag777 WPCSWordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability

Risk 40
Severity
6.5
Code Injection
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in realmag777 WPCS allows Code Injection.This issue affects WPCS: from n/a through 1.2.0.3.

First published (updated )
CVE-2024-38700

realmag777 WordPress Meta Data and Taxonomies FilterWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

Risk 79
Severity
8.8
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.

Remedy

Update to 1.3.3.1 or a higher version.
First published (updated )
CVE-2024-32818

realmag777 WordPress Meta Data and Taxonomies Filter (MDTF)WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability

Risk 40
Severity
6.5
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.2.

Remedy

Update to 1.3.3.3 or a higher version.
First published (updated )
CVE-2024-34434

Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional WordpressWordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability

Risk 30
Severity
5.9
EPSS
0.04%
XSS
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2.

Remedy

Update to 1.0.8.3 or a higher version.
First published (updated )
CVE-2024-34558

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203