PL
Vendor
Pluginus
86
CVEs
0
On KEV
0
New 30D
Products
BW8.8
Bear - Woocommerce Bulk Editor And Products Manager Professional
Pluginus
18 CVEs0 on KEV0 new
HP9.8
Husky - Products Filter Professional For Woocommerce
Pluginus
14 CVEs0 on KEV0 new
WM9.9
Wordpress Meta Data And Taxonomies Filter
Pluginus
12 CVEs0 on KEV0 new
WW8.8
Wolf - Wordpress Posts Bulk Editor And Products Manager Professional
Pluginus
10 CVEs0 on KEV0 new
WO9.8
Woot
Pluginus
7 CVEs0 on KEV0 new
FC8.8
Fox - Currency Switcher Professional For Woocommerce
Pluginus
6 CVEs0 on KEV0 new
IG9.8
Inpost Gallery
Pluginus
3 CVEs0 on KEV0 new
WC8.8
Wordpress Currency Switcher
Pluginus
3 CVEs0 on KEV0 new
WC5.4
Wordpress Currency Switcher Professional
Pluginus
3 CVEs0 on KEV0 new
MD5.4
Meta Data And Taxonomies Filter
Pluginus
2 CVEs0 on KEV0 new
WP6.1
Woocommerce Products Filter
Pluginus
2 CVEs0 on KEV0 new
AP6.1
Active Products Tables For Woocommerce
Pluginus
1 CVEs0 on KEV0 new
TW5.4
Tableon - Wordpress Posts Table Filterable
Pluginus
1 CVEs0 on KEV0 new
TC5.4
Taxonomy Chain Menu
Pluginus
1 CVEs0 on KEV0 new
WW8.8
Wolf - Wordpress Posts Bulk Editor And Manager Professional
Pluginus
1 CVEs0 on KEV0 new
WC6.1
Woocommerce Currency Switcher
Pluginus
1 CVEs0 on KEV0 new
WO6.1
Woocs
Pluginus
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5143 | TW Tableon - Wordpress Posts Table Filterable Pluginus | 5.4 | Jun 21 | The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableon_popup_iframe_button shortcode in all… |
| CVE-2025-3748 | TC Taxonomy Chain Menu Pluginus | 5.4 | May 2 | The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu shortcode in all versions up to, and including, 1.0.8 due… |
| CVE-2025-1661 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 9.8 | Mar 11 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the… |
| CVE-2025-0864 | AP Active Products Tables For Woocommerce Pluginus | 6.1 | Feb 18 | The Active Products Tables for WooCommerce |
| CVE-2025-26775 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.8 | Feb 17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR:… |
| CVE-2025-24605 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 7.2 | Feb 3 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a… |
| CVE-2024-13340 | MD Meta Data And Taxonomies Filter Pluginus | 5.4 | Jan 23 | The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' shortcode in all versions up… |
| CVE-2024-12030 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.5 | Jan 8 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-40334 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Dec 13 | Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
| CVE-2024-11002 | IG Inpost Gallery Pluginus | 6.3 | Nov 26 | The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action in all versions up to, and… |
| CVE-2024-11400 | WP Woocommerce Products Filter Pluginus | 6.1 | Nov 19 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the really_curr_tax parameter in all versions up… |
| CVE-2024-52396 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 8.8 | Nov 14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a… |
| CVE-2024-10168 | WO Woot Pluginus | 5.4 | Nov 6 | The Active Products Tables for WooCommerce |
| CVE-2024-50451 | MD Meta Data And Taxonomies Filter Pluginus | 5.4 | Oct 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects… |
| CVE-2024-50450 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 9.8 | Oct 28 | Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF:… |
| CVE-2024-7491 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 4.3 | Sep 25 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.6.1 via… |
| CVE-2024-8624 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 9.9 | Sep 24 | The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' shortcode in all versions up… |
| CVE-2024-8623 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 7.3 | Sep 24 | The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.3.3.3 |
| CVE-2024-8271 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 7.3 | Sep 14 | The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.2.1 |
| CVE-2024-43121 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.2 | Aug 13 | Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1 |
| CVE-2024-6457 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.5 | Jul 16 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woof_author’ parameter in all versions up to, and… |
| CVE-2024-32818 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 8.8 | Jun 9 | Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a… |
| CVE-2024-35730 | WO Woot Pluginus | 6.1 | Jun 8 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce allows Reflected… |
| CVE-2024-5039 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 6.4 | May 29 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and… |
| CVE-2024-34434 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.5 | May 17 | Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue affects WordPress Meta… |
| CVE-2024-32680 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | May 17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUS HUSKY –… |
| CVE-2024-34558 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.8 | May 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through… |
| CVE-2024-31430 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 8.8 | Apr 10 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager… |
| CVE-2024-30463 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 5.3 | Mar 29 | Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3 |
| CVE-2024-30462 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce… |
| CVE-2024-30458 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects WOOCS – WooCommerce Currency Switcher: from n/a through… |
| CVE-2024-30457 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF):… |
| CVE-2024-30456 | WC Wordpress Currency Switcher Pluginus | 8.8 | Mar 29 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1 |
| CVE-2024-3061 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.2 | Mar 29 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.5.2 via the 'type'… |
| CVE-2024-30200 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 6.1 | Mar 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a… |
| CVE-2024-29763 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Reflected… |
| CVE-2024-29932 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored… |
| CVE-2024-29906 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 5.4 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored… |
| CVE-2024-24835 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 6.5 | Mar 23 | Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4 |
| CVE-2023-50861 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 15 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce… |
| CVE-2024-1796 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 5.4 | Mar 15 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'woof' shortcode in all versions up to,… |
| CVE-2024-1795 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 15 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'name' parameter in the woof shortcode in all versions up to,… |
| CVE-2023-51480 | WO Woot Pluginus | 5.4 | Feb 10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce |
| CVE-2024-24834 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.8 | Feb 8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR – Bulk Editor and Products Manager Professional for… |
| CVE-2024-0797 | WO Woot Pluginus | 4.3 | Feb 5 | The Active Products Tables for WooCommerce |
| CVE-2024-0796 | WO Woot Pluginus | 4.3 | Feb 5 | The Active Products Tables for WooCommerce |
| CVE-2024-0791 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.3 | Feb 5 | The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability… |
| CVE-2024-0790 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.3 | Feb 5 | The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1 |
| CVE-2023-51506 | WC Wordpress Currency Switcher Pluginus | 5.4 | Feb 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – WordPress Currency Switcher Professional allows Stored… |
| CVE-2024-22159 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 6.1 | Jan 31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional allows… |
| CVE-2021-24566 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Jan 16 | The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode |
| CVE-2023-6556 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 5.4 | Jan 11 | The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and… |
| CVE-2023-51505 | WO Woot Pluginus | 9.8 | Dec 29 | Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce |
| CVE-2023-40010 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 9.8 | Dec 20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in realmag777 HUSKY – Products Filter for WooCommerce Professional.This issue… |
| CVE-2023-49834 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Dec 17 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for… |
| CVE-2023-46152 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 8.8 | Oct 25 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions |
| CVE-2023-4941 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.3 | Oct 20 | The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3 |
| CVE-2023-4926 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.3 | Oct 20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3 |
| CVE-2023-4924 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.3 | Oct 20 | The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3 |
| CVE-2023-4923 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.3 | Oct 20 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3 |
