PC
Product
Product Catalog Simple
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Product Catalog Simple to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51687 | 7.5 | Dec 29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6 Affected: before 1.7.7 |
| CVE-2025-58992 | 6.5 | Sep 22 | WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 1.8.2 |
| CVE-2025-49305 | 6.5 | Jun 6 | WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 1.8.1 |
| CVE-2023-29388 | 6.1 | Apr 7 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions Affected: before 1.7.0 |
| CVE-2025-1405 | 5.4 | Feb 28 | The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions up to, and including, 1.7.11… Affected: before 1.8.0 |
| CVE-2025-62061 | 4.3 | Oct 22 | WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.8.4 |
| CVE-2020-36743 | 4.3 | Jul 1 | The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13 Affected: through 1.5.13 |
Showing 7
