Filter
-Infinity
0

WPFactory MSRP (RRP) Pricing for WooCommerceWordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
EPSS
0.04%
First published (updated )

WPFactory Product Excel Import Export & Bulk Edit for WooCommerceWordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability

7.1
EPSS
0.04%
First published (updated )

WPFactory Custom CSS, JS & PHPWordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability

EPSS
0.02%
First published (updated )

WordPress Additional Custom Product Tabs for WooCommerceWordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

First published (updated )

WordPress Advanced WooCommerce Product Sales ReportingWordPress Advanced WooCommerce Product Sales Reporting plugin <= 3.1 - SQL Injection vulnerability

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Wpfactory Quantity Dynamic Pricing & Bulk Discounts for WooCommerceWordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.0 - Stored Cross Site Scripting (XSS) vulnerability

EPSS
0.03%
First published (updated )

WPFactory EAN Barcode GeneratorWordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability

First published (updated )

WordPress Scheduled & Automatic Order Status Controller for WooCommerceWordPress Scheduled & Automatic Order Status Controller for WooCommerce <= 3.7.1 - Open Redirection Vulnerability

EPSS
0.03%
First published (updated )

WooCommerce Wishlist for WooCommerceWishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name

First published (updated )

Wpfactory Customer Email Verification for WooCommerceCustomer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Wpfactory Customer Email Verification for WooCommerceCustomer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode

7.5
First published (updated )

WooCommerce Wishlist for WooCommerce: Multi Wishlists Per CustomerWordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

WooCommerce Cost of GoodsWordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability

First published (updated )

Awesome Shortcodes For GenesisWordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

Wpfactory EU/UK VAT Manager for WooCommerce WordPressWordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WooCommerce Customer Email VerificationWordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability

EPSS
0.12%
First published (updated )

Wpfactory Products, Order & Customers Export For WoocommerceProducts, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting

EPSS
0.05%
First published (updated )

Wpfactory Maximum Products Per User For WoocommerceMaximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting

EPSS
0.05%
First published (updated )

Wpfactory Quantity Dynamic Pricing & Bulk Discounts for WooCommerce WordPressQuantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting

EPSS
0.05%
First published (updated )

Wpfactory EU/UK VAT Manager for WooCommerce WordPressEU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization

EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Wpfactory EU/UK VAT Manager for WooCommerce WordPressEU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting

EPSS
0.05%
First published (updated )

WpfactoryWPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting

EPSS
0.05%
First published (updated )

WordPress Products, Order & Customers Export for WooCommerceWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

7.1
First published (updated )

Wpfactory Products, Order & Customers Export For WoocommerceWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability

First published (updated )

WpfactoryWordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

WPFactory EAN for WooCommerceXSS

First published (updated )

WooCommerce EAN for WooCommerceThe EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in al…

First published (updated )

WpfactoryWordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

EPSS
0.04%
First published (updated )

WooCommerce Cost & Profit CalculatorXSS

First published (updated )

WpfactoryWordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203