Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how realmag777 compares to other vendors in security performance

View Risk Score →

Software

realmag777 bear
4
realmag777 tableon
4
realmag777 wolf
4
realmag777 active products tables for woocommerce
3
realmag777 husky
3
realmag777 wordpress meta data and taxonomies filter
3
realmag777 fox woocommerce currency switcher
2
realmag777 husky – products filter for woocommerce
2
realmag777 inpost gallery
2
realmag777 wordpress meta data and taxonomies filter (mdtf)
2
realmag777 bear woo-bulk-editor
1
realmag777 bear – bulk editor and products manager professional for woocommerce
1
realmag777 google map targeting
1
realmag777 husky (woocommerce-products-filter)
1
realmag777 mdtf
1
realmag777 mdtf (wp-meta-data-filter-and-taxonomy-filter)
1
realmag777 mdtf wp-meta-data-filter-and-taxonomy-filter
1
realmag777 tableon – wordpress posts table filterable
1
realmag777 wolf – wordpress posts bulk editor and manager professional
1
realmag777 woocs – woocommerce currency switcher
1
realmag777 wordpress currency switcher professional (wpcs)
1
realmag777 wordpress mdtf – meta data and taxonomies filter
1
realmag777 wp-meta-data-filter-and-taxonomy-filter (mdtf)
1
realmag777 wpcs
1

RealMag777 FOX WooCommerce Currency SwitcherWordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability

Risk 47
Severity
7.6
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through <= 1.4.5.

First published (updated )
CVE-2026-39497

RealMag777 FOX WooCommerce Currency SwitcherWordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through <= 1.4.5.

First published (updated )
CVE-2026-39501

RealMag777 BEARWordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability

Risk 22
Severity
5.9
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.

Remedy

Update the WordPress BEAR wordpress plugin to the latest available version (at least 1.1.4.5).
First published (updated )
CVE-2025-26775

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.8.

First published (updated )
CVE-2026-42727

RealMag777 TableOnWordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

First published (updated )
CVE-2026-42755

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability

Risk 61
Severity
9.3
SQL Injection
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Blind SQL Injection.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.9.

First published (updated )
CVE-2026-42761

RealMag777 InPost GalleryWordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability

Risk 70
Severity
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 InPost Gallery allows PHP Local File Inclusion. This issue affects InPost Gallery: from n/a through 2.1.4.5.

1 / 2
Source: NVD

Remedy

Update the WordPress InPost Gallery plugin to the latest available version (at least 2.1.4.6).
First published (updated )
CVE-2025-57889

RealMag777 BEAR woo-bulk-editorWordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability

Risk 47
Severity
7.6
SQL Injection
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.

First published (updated )
CVE-2026-45213

RealMag777 Active Products Tables for WooCommerceWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability

Risk 34
Severity
6.5
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce allows Stored XSS. This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.8.

1 / 2
Source: NVD

Remedy

Update the WordPress Active Products Tables for WooCommerce plugin to the latest available version (at least 1.0.6.9).
First published (updated )
CVE-2025-48266

realmag777 HUSKYWordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.

Remedy

Update the WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) plugin to the latest available version (at least 1.3.4.3).
First published (updated )
CVE-2023-40334

realmag777 WOLFWordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability

Risk 35
Severity
7.6
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through <= 1.0.8.7.

First published (updated )
CVE-2026-32458

Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional WordpressWordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability

Risk 30
Severity
5.9
EPSS
0.04%
XSS
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2.

Remedy

Update to 1.0.8.3 or a higher version.
First published (updated )
CVE-2024-34558

realmag777 WOLF – WordPress Posts Bulk Editor and Manager ProfessionalCross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins

Risk 56
Severity
8.8
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.1; BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net: from n/a through 1.1.4.1.

Remedy

Update WOLF plugin to 1.0.8.2 or a higher version. Update BEAR plugin to 1.1.4.2 or a higher version.
First published (updated )
CVE-2024-31430

realmag777 WordPress Meta Data and Taxonomies Filter (MDTF)WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.1.

Remedy

Update to 1.3.3.2 or a higher version.
First published (updated )
CVE-2024-30457

realmag777 WOOCS – WooCommerce Currency SwitcherWordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce Currency Switcher: from n/a through 1.4.1.7.

Remedy

Update to 1.4.1.8 or a higher version.
First published (updated )
CVE-2024-30458

Pluginus Husky - Products Filter Professional For Woocommerce WordpressWordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce (formerly WOOF): from n/a through 1.3.5.1.

Remedy

Update to 1.3.5.2 or a higher version.
First published (updated )
CVE-2024-30462

RealMag777 BEARWordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability

Risk 19
Severity
5.3
EPSS
0.04%
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3.

Remedy

Update to 1.1.4.4 or a higher version.
First published (updated )
CVE-2024-30463

realmag777 WordPress Currency Switcher Professional (WPCS)WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1.

Remedy

Update to 1.2.0.2 or a higher version.
First published (updated )
CVE-2024-30456

RealMag777 BEARWordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.

Remedy

Update to 1.1.4.3 or a higher version.
First published (updated )
CVE-2024-30200

realmag777 WordPress Meta Data and Taxonomies FilterWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Risk 30
Severity
5.9
EPSS
0.04%
XSS
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.2.

Remedy

Update to 1.3.3 or a higher version.
First published (updated )
CVE-2024-29906

realmag777 WordPress Meta Data and Taxonomies FilterWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Reflected XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.

Remedy

Update to 1.3.3.1 or a higher version.
First published (updated )
CVE-2024-29763

RealMag777 BEARWordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability

Risk 38
Severity
6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.

Remedy

Update to 1.1.4.1 or a higher version.
First published (updated )
CVE-2024-24835

Pluginus Husky - Products Filter Professional For Woocommerce WordpressWordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce (formerly WOOF): from n/a through 1.3.4.3.

Remedy

Update to 1.3.4.4 or a higher version.
First published (updated )
CVE-2023-50861

RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filterWordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through <= 1.3.3.8.

First published (updated )
CVE-2025-62069

RealMag777 TableOnWordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability

Risk 50
Severity
7.1
XSS, Code Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in RealMag777 TableOn posts-table-filterable allows Code Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.

First published (updated )
CVE-2025-60244

RealMag777 wp-meta-data-filter-and-taxonomy-filter (MDTF)WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.6.

First published (updated )
CVE-2025-62964

RealMag777 MDTF (wp-meta-data-filter-and-taxonomy-filter)WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability

Risk 61
Severity
9.3
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 MDTF allows SQL Injection. This issue affects MDTF: from n/a through 1.3.3.7.

1 / 2
Source: NVD

Remedy

Update the WordPress MDTF plugin to the latest available version (at least 1.3.3.8).
First published (updated )
CVE-2025-54707

realmag777 HUSKYWordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability

Risk 51
Severity
7.5
EPSS
0.11%
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY allows PHP Local File Inclusion. This issue affects HUSKY: from n/a through 1.3.7.

1 / 2
Source: NVD

Remedy

Update the WordPress HUSKY plugin to the latest available version (at least 1.3.7.1).
First published (updated )
CVE-2025-52708

RealMag777 Google Map TargetingWordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability

Risk 79
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 GMap Targeting gmap-targeting allows PHP Local File Inclusion.This issue affects GMap Targeting: from n/a through <= 1.1.6.

1 / 2
Source: MITRE

Remedy

Update the WordPress Google Map Targeting plugin to the latest available version (at least 1.1.7).
First published (updated )
CVE-2025-52732

RealMag777 MDTFWordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability

Risk 22
Severity
4.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.3.9.

First published (updated )
CVE-2025-49907

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203