EF
Product
EAN for WooCommerce
by WPFactory · last CVE May 19, 2025
6
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch

Add EAN for WooCommerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-48249
6.5
0%
May 19
WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability
Affected: through 5.4.6
CVE-2023-6892
5.4
0%
Apr 18
The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_product_meta' shortcode in all versions up to, and…
Affected: before 4.9.3
CVE-2023-0062
5.4
1%
Feb 6
The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode…
Affected: before 4.4.3
CVE-2025-22673
4.3
0%
Mar 27
WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability
Affected: through 5.3.5
CVE-2023-6897
4.3
0%
Apr 18
The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.9.2 via the the 'alg_wc_ean_product_meta'…
Affected: before 4.9.3
Showing 5