PC
Product
Product Catalog Simple
by impleCode · last CVE Oct 22, 2025
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch

Add Product Catalog Simple to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51687
7.5
0%
Dec 29
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6
Affected: before 1.7.7
CVE-2025-58992
6.5
0%
Sep 22
WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.8.2
CVE-2025-49305
6.5
0%
Jun 6
WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.8.1
CVE-2023-29388
6.1
0%
Apr 7
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions
Affected: before 1.7.0
CVE-2025-1405
5.4
0%
Feb 28
The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions up to, and including, 1.7.11…
Affected: before 1.8.0
CVE-2025-62061
4.3
0%
Oct 22
WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.8.4
CVE-2020-36743
4.3
0%
Jul 1
The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13
Affected: through 1.5.13
Showing 7